Text file src/github.com/sigstore/cosign/v2/test/testdata/bom-go-mod.spdx

Documentation: github.com/sigstore/cosign/v2/test/testdata

     1SPDXVersion: SPDX-2.2
     2DataLicense: CC0-1.0
     3SPDXID: SPDXRef-DOCUMENT
     4DocumentName: github.com/sigstore/cosign
     5DocumentNamespace: http://spdx.org/spdxpackages/github.com/sigstore/cosign-9a615223-fdf6-40cc-8156-666d7da86672
     6Creator: Tool: spdx-sbom-generator-0.0.1
     7Created: 2021-06-27T13:42:53Z
     8
     9##### Package representing the github.com/sigstore/cosign
    10
    11PackageName: github.com/sigstore/cosign
    12SPDXID: SPDXRef-Package-github.com.sigstore.cosign
    13PackageVersion: ddd9132
    14PackageSupplier: NOASSERTION
    15PackageDownloadLocation: NOASSERTION
    16FilesAnalyzed: false
    17PackageChecksum: SHA256: 0d8975f6ff7067f2adad485924e0854caec9c5d46306bf5b901d311c2fb05a7a
    18PackageHomePage: https://github.com/sigstore/cosign
    19PackageLicenseConcluded: NOASSERTION
    20PackageLicenseDeclared: NOASSERTION
    21PackageCopyrightText: NOASSERTION
    22PackageLicenseComments: NOASSERTION
    23PackageComment: NOASSERTION
    24
    25Relationship SPDXRef-DOCUMENT DESCRIBES SPDXRef-Package-github.com.sigstore.cosign 
    26
    27Relationship SPDXRef-Package-github.com.sigstore.cosign DEPENDS_ON SPDXRef-Package-k8s.io.apimachinery-v0.21.2 
    28Relationship SPDXRef-Package-github.com.sigstore.cosign DEPENDS_ON SPDXRef-Package-github.com.go-openapi.analysis-v0.20.1 
    29Relationship SPDXRef-Package-github.com.sigstore.cosign DEPENDS_ON SPDXRef-Package-github.com.go-openapi.strfmt-v0.20.1 
    30Relationship SPDXRef-Package-github.com.sigstore.cosign DEPENDS_ON SPDXRef-Package-github.com.leodido.go-urn-v1.2.1 
    31Relationship SPDXRef-Package-github.com.sigstore.cosign DEPENDS_ON SPDXRef-Package-github.com.sigstore.fulcio-v0.0.0-20210405115948-e7630f533fca 
    32Relationship SPDXRef-Package-github.com.sigstore.cosign DEPENDS_ON SPDXRef-Package-github.com.peterbourgon.ff.v3-v3.0.0 
    33Relationship SPDXRef-Package-github.com.sigstore.cosign DEPENDS_ON SPDXRef-Package-github.com.cyberphone.json-canonicalization-v0.0.0-20210303052042-6bc126869bf4 
    34Relationship SPDXRef-Package-github.com.sigstore.cosign DEPENDS_ON SPDXRef-Package-github.com.go-openapi.runtime-v0.19.29 
    35Relationship SPDXRef-Package-github.com.sigstore.cosign DEPENDS_ON SPDXRef-Package-github.com.open-policy-agent.opa-v0.29.4 
    36Relationship SPDXRef-Package-github.com.sigstore.cosign DEPENDS_ON SPDXRef-Package-github.com.pelletier.go-toml-v1.9.3 
    37Relationship SPDXRef-Package-github.com.sigstore.cosign DEPENDS_ON SPDXRef-Package-github.com.spf13.afero-v1.6.0 
    38Relationship SPDXRef-Package-github.com.sigstore.cosign DEPENDS_ON SPDXRef-Package-github.com.theupdateframework.go-tuf-v0.0.0-20201230183259-aee6270feb55 
    39Relationship SPDXRef-Package-github.com.sigstore.cosign DEPENDS_ON SPDXRef-Package-google.golang.org.genproto-v0.0.0-20210617175327-b9e0b3197ced 
    40Relationship SPDXRef-Package-github.com.sigstore.cosign DEPENDS_ON SPDXRef-Package-golang.org.x.crypto-v0.0.0-20210616213533-5ff15b29337e 
    41Relationship SPDXRef-Package-github.com.sigstore.cosign DEPENDS_ON SPDXRef-Package-github.com.go-openapi.swag-v0.19.15 
    42Relationship SPDXRef-Package-github.com.sigstore.cosign DEPENDS_ON SPDXRef-Package-github.com.google.gofuzz-v1.2.0 
    43Relationship SPDXRef-Package-github.com.sigstore.cosign DEPENDS_ON SPDXRef-Package-github.com.pkg.errors-v0.9.1 
    44Relationship SPDXRef-Package-github.com.sigstore.cosign DEPENDS_ON SPDXRef-Package-github.com.prometheus.common-v0.29.0 
    45Relationship SPDXRef-Package-github.com.sigstore.cosign DEPENDS_ON SPDXRef-Package-go.uber.org.multierr-v1.7.0 
    46Relationship SPDXRef-Package-github.com.sigstore.cosign DEPENDS_ON SPDXRef-Package-golang.org.x.term-v0.0.0-20210615171337-6886f2dfbf5b 
    47Relationship SPDXRef-Package-github.com.sigstore.cosign DEPENDS_ON SPDXRef-Package-k8s.io.api-v0.21.2 
    48Relationship SPDXRef-Package-github.com.sigstore.cosign DEPENDS_ON SPDXRef-Package-github.com.sigstore.sigstore-v0.0.0-20210609084117-386ea718fc64 
    49Relationship SPDXRef-Package-github.com.sigstore.cosign DEPENDS_ON SPDXRef-Package-k8s.io.client-go-v0.21.2 
    50Relationship SPDXRef-Package-github.com.sigstore.cosign DEPENDS_ON SPDXRef-Package-github.com.google.go-cmp-v0.5.6 
    51Relationship SPDXRef-Package-github.com.sigstore.cosign DEPENDS_ON SPDXRef-Package-github.com.google.go-containerregistry-v0.5.1 
    52Relationship SPDXRef-Package-github.com.sigstore.cosign DEPENDS_ON SPDXRef-Package-github.com.google.trillian-v1.3.14-0.20210413093047-5e12fb368c8f 
    53Relationship SPDXRef-Package-github.com.sigstore.cosign DEPENDS_ON SPDXRef-Package-github.com.jedisct1.go-minisign-v0.0.0-20210414164026-819d7e2534ac 
    54Relationship SPDXRef-Package-github.com.sigstore.cosign DEPENDS_ON SPDXRef-Package-go.mongodb.org.mongo-driver-v1.5.3 
    55Relationship SPDXRef-Package-github.com.sigstore.cosign DEPENDS_ON SPDXRef-Package-golang.org.x.sync-v0.0.0-20210220032951-036812b2e83c 
    56Relationship SPDXRef-Package-github.com.sigstore.cosign DEPENDS_ON SPDXRef-Package-github.com.magiconair.properties-v1.8.5 
    57Relationship SPDXRef-Package-github.com.sigstore.cosign DEPENDS_ON SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 
    58
    59##### Package representing the github.com/google/go-containerregistry
    60
    61PackageName: github.com/google/go-containerregistry
    62SPDXID: SPDXRef-Package-github.com.google.go-containerregistry-v0.5.1
    63PackageVersion: v0.5.1
    64PackageSupplier: NOASSERTION
    65PackageDownloadLocation: NOASSERTION
    66FilesAnalyzed: false
    67PackageChecksum: SHA256: 9f611b3f2b625e9f4af823b9833dfd4317f575a270cd6c156ee9f5b89ec49454
    68PackageHomePage: https://github.com/google/go-containerregistry
    69PackageLicenseConcluded: NOASSERTION
    70PackageLicenseDeclared: NOASSERTION
    71PackageCopyrightText: NOASSERTION
    72PackageLicenseComments: NOASSERTION
    73PackageComment: NOASSERTION
    74
    75Relationship SPDXRef-Package-github.com.google.go-containerregistry-v0.5.1 DEPENDS_ON SPDXRef-Package-cloud.google.com.go-v0.81.0 
    76Relationship SPDXRef-Package-github.com.google.go-containerregistry-v0.5.1 DEPENDS_ON SPDXRef-Package-github.com.docker.cli-v0.0.0-20191017083524-a8ff7f821017 
    77Relationship SPDXRef-Package-github.com.google.go-containerregistry-v0.5.1 DEPENDS_ON SPDXRef-Package-github.com.opencontainers.image-spec-v1.0.1 
    78Relationship SPDXRef-Package-github.com.google.go-containerregistry-v0.5.1 DEPENDS_ON SPDXRef-Package-github.com.sirupsen.logrus-v1.8.1 
    79Relationship SPDXRef-Package-github.com.google.go-containerregistry-v0.5.1 DEPENDS_ON SPDXRef-Package-golang.org.x.time-v0.0.0-20210220033141-f8bda1e9f3ba 
    80Relationship SPDXRef-Package-github.com.google.go-containerregistry-v0.5.1 DEPENDS_ON SPDXRef-Package-k8s.io.klog.v2-v2.8.0 
    81Relationship SPDXRef-Package-github.com.google.go-containerregistry-v0.5.1 DEPENDS_ON SPDXRef-Package-google.golang.org.genproto-v0.0.0-20210617175327-b9e0b3197ced 
    82Relationship SPDXRef-Package-github.com.google.go-containerregistry-v0.5.1 DEPENDS_ON SPDXRef-Package-github.com.containerd.stargz-snapshotter.estargz-v0.4.1 
    83Relationship SPDXRef-Package-github.com.google.go-containerregistry-v0.5.1 DEPENDS_ON SPDXRef-Package-github.com.docker.docker-v1.4.2-0.20200319182547-c7ad2b866182 
    84Relationship SPDXRef-Package-github.com.google.go-containerregistry-v0.5.1 DEPENDS_ON SPDXRef-Package-github.com.docker.docker-credential-helpers-v0.6.3 
    85Relationship SPDXRef-Package-github.com.google.go-containerregistry-v0.5.1 DEPENDS_ON SPDXRef-Package-github.com.spf13.cobra-v1.1.3 
    86Relationship SPDXRef-Package-github.com.google.go-containerregistry-v0.5.1 DEPENDS_ON SPDXRef-Package-golang.org.x.sync-v0.0.0-20210220032951-036812b2e83c 
    87Relationship SPDXRef-Package-github.com.google.go-containerregistry-v0.5.1 DEPENDS_ON SPDXRef-Package-golang.org.x.text-v0.3.6 
    88Relationship SPDXRef-Package-github.com.google.go-containerregistry-v0.5.1 DEPENDS_ON SPDXRef-Package-github.com.gorilla.mux-v1.8.0 
    89Relationship SPDXRef-Package-github.com.google.go-containerregistry-v0.5.1 DEPENDS_ON SPDXRef-Package-gopkg.in.yaml.v2-v2.4.0 
    90Relationship SPDXRef-Package-github.com.google.go-containerregistry-v0.5.1 DEPENDS_ON SPDXRef-Package-github.com.docker.distribution-v2.7.1+incompatible 
    91Relationship SPDXRef-Package-github.com.google.go-containerregistry-v0.5.1 DEPENDS_ON SPDXRef-Package-github.com.google.go-cmp-v0.5.6 
    92Relationship SPDXRef-Package-github.com.google.go-containerregistry-v0.5.1 DEPENDS_ON SPDXRef-Package-golang.org.x.oauth2-v0.0.0-20210514164344-f6687ab2804c 
    93
    94##### Package representing the github.com/peterbourgon/ff/v3
    95
    96PackageName: github.com/peterbourgon/ff/v3
    97SPDXID: SPDXRef-Package-github.com.peterbourgon.ff.v3-v3.0.0
    98PackageVersion: v3.0.0
    99PackageSupplier: NOASSERTION
   100PackageDownloadLocation: NOASSERTION
   101FilesAnalyzed: false
   102PackageChecksum: SHA256: 717d2deecd326f89ac03355a0c60e7af8cec09cdf35c739c9db64677b7f767ae
   103PackageHomePage: https://github.com/peterbourgon/ff/v3
   104PackageLicenseConcluded: NOASSERTION
   105PackageLicenseDeclared: NOASSERTION
   106PackageCopyrightText: NOASSERTION
   107PackageLicenseComments: NOASSERTION
   108PackageComment: NOASSERTION
   109
   110Relationship SPDXRef-Package-github.com.peterbourgon.ff.v3-v3.0.0 DEPENDS_ON SPDXRef-Package-github.com.pelletier.go-toml-v1.9.3 
   111Relationship SPDXRef-Package-github.com.peterbourgon.ff.v3-v3.0.0 DEPENDS_ON SPDXRef-Package-gopkg.in.yaml.v2-v2.4.0 
   112
   113##### Package representing the github.com/pkg/errors
   114
   115PackageName: github.com/pkg/errors
   116SPDXID: SPDXRef-Package-github.com.pkg.errors-v0.9.1
   117PackageVersion: v0.9.1
   118PackageSupplier: NOASSERTION
   119PackageDownloadLocation: NOASSERTION
   120FilesAnalyzed: false
   121PackageChecksum: SHA256: e984effb1b0eef5e6cfefb3f37f23bfaee28d5180f11c64fb43a46b7f7421edb
   122PackageHomePage: https://github.com/pkg/errors
   123PackageLicenseConcluded: NOASSERTION
   124PackageLicenseDeclared: NOASSERTION
   125PackageCopyrightText: NOASSERTION
   126PackageLicenseComments: NOASSERTION
   127PackageComment: NOASSERTION
   128
   129##### Package representing the github.com/docker/cli
   130
   131PackageName: github.com/docker/cli
   132SPDXID: SPDXRef-Package-github.com.docker.cli-v0.0.0-20191017083524-a8ff7f821017
   133PackageVersion: v0.0.0-20191017083524-a8ff7f821017
   134PackageSupplier: NOASSERTION
   135PackageDownloadLocation: NOASSERTION
   136FilesAnalyzed: false
   137PackageChecksum: SHA256: 0e16595382ffbd6bd8cd20be937e87ad48d5e20d678fb52b4913740565cb5e26
   138PackageHomePage: https://github.com/docker/cli
   139PackageLicenseConcluded: NOASSERTION
   140PackageLicenseDeclared: NOASSERTION
   141PackageCopyrightText: NOASSERTION
   142PackageLicenseComments: NOASSERTION
   143PackageComment: NOASSERTION
   144
   145##### Package representing the github.com/docker/docker-credential-helpers
   146
   147PackageName: github.com/docker/docker-credential-helpers
   148SPDXID: SPDXRef-Package-github.com.docker.docker-credential-helpers-v0.6.3
   149PackageVersion: v0.6.3
   150PackageSupplier: NOASSERTION
   151PackageDownloadLocation: NOASSERTION
   152FilesAnalyzed: false
   153PackageChecksum: SHA256: 0a83f71929507b20f2c695a3a5833519fcf606d470948b083847e31c09433bee
   154PackageHomePage: https://github.com/docker/docker-credential-helpers
   155PackageLicenseConcluded: NOASSERTION
   156PackageLicenseDeclared: NOASSERTION
   157PackageCopyrightText: NOASSERTION
   158PackageLicenseComments: NOASSERTION
   159PackageComment: NOASSERTION
   160
   161##### Package representing the github.com/docker/docker
   162
   163PackageName: github.com/docker/docker
   164SPDXID: SPDXRef-Package-github.com.docker.docker-v1.4.2-0.20200319182547-c7ad2b866182
   165PackageVersion: v1.4.2-0.20200319182547-c7ad2b866182
   166PackageSupplier: NOASSERTION
   167PackageDownloadLocation: NOASSERTION
   168FilesAnalyzed: false
   169PackageChecksum: SHA256: b48d221328853f35e846891d066cbfbbfd0f0e8e15d37745d68215d4bfa663c5
   170PackageHomePage: https://github.com/docker/docker
   171PackageLicenseConcluded: NOASSERTION
   172PackageLicenseDeclared: NOASSERTION
   173PackageCopyrightText: NOASSERTION
   174PackageLicenseComments: NOASSERTION
   175PackageComment: NOASSERTION
   176
   177##### Package representing the github.com/opencontainers/go-digest
   178
   179PackageName: github.com/opencontainers/go-digest
   180SPDXID: SPDXRef-Package-github.com.opencontainers.go-digest-v1.0.0
   181PackageVersion: v1.0.0
   182PackageSupplier: NOASSERTION
   183PackageDownloadLocation: NOASSERTION
   184FilesAnalyzed: false
   185PackageChecksum: SHA256: 06744ce2bb1c85d4117a2ba9e9a817665e52ed5f36e9722e8fada53867a9fae1
   186PackageHomePage: https://github.com/opencontainers/go-digest
   187PackageLicenseConcluded: NOASSERTION
   188PackageLicenseDeclared: NOASSERTION
   189PackageCopyrightText: NOASSERTION
   190PackageLicenseComments: NOASSERTION
   191PackageComment: NOASSERTION
   192
   193##### Package representing the github.com/opencontainers/image-spec
   194
   195PackageName: github.com/opencontainers/image-spec
   196SPDXID: SPDXRef-Package-github.com.opencontainers.image-spec-v1.0.1
   197PackageVersion: v1.0.1
   198PackageSupplier: NOASSERTION
   199PackageDownloadLocation: NOASSERTION
   200FilesAnalyzed: false
   201PackageChecksum: SHA256: e3790a1082e695077024de83b32cfc198508585d3e37d430aaa325cfbe0c4a0f
   202PackageHomePage: https://github.com/opencontainers/image-spec
   203PackageLicenseConcluded: NOASSERTION
   204PackageLicenseDeclared: NOASSERTION
   205PackageCopyrightText: NOASSERTION
   206PackageLicenseComments: NOASSERTION
   207PackageComment: NOASSERTION
   208
   209##### Package representing the github.com/docker/distribution
   210
   211PackageName: github.com/docker/distribution
   212SPDXID: SPDXRef-Package-github.com.docker.distribution-v2.7.1+incompatible
   213PackageVersion: v2.7.1+incompatible
   214PackageSupplier: NOASSERTION
   215PackageDownloadLocation: NOASSERTION
   216FilesAnalyzed: false
   217PackageChecksum: SHA256: 1e591e4b18738469da7205179340f527fe732e0c3cba080abd084828a3a16d7f
   218PackageHomePage: https://github.com/docker/distribution
   219PackageLicenseConcluded: NOASSERTION
   220PackageLicenseDeclared: NOASSERTION
   221PackageCopyrightText: NOASSERTION
   222PackageLicenseComments: NOASSERTION
   223PackageComment: NOASSERTION
   224
   225##### Package representing the golang.org/x/sync
   226
   227PackageName: golang.org/x/sync
   228SPDXID: SPDXRef-Package-golang.org.x.sync-v0.0.0-20210220032951-036812b2e83c
   229PackageVersion: v0.0.0-20210220032951-036812b2e83c
   230PackageSupplier: NOASSERTION
   231PackageDownloadLocation: NOASSERTION
   232FilesAnalyzed: false
   233PackageChecksum: SHA256: c2c8d8b8e332215da159aa126456187286e44d97353e0566e77e350e5a8522f7
   234PackageHomePage: https://golang.org/x/sync
   235PackageLicenseConcluded: NOASSERTION
   236PackageLicenseDeclared: NOASSERTION
   237PackageCopyrightText: NOASSERTION
   238PackageLicenseComments: NOASSERTION
   239PackageComment: NOASSERTION
   240
   241##### Package representing the github.com/cyberphone/json-canonicalization
   242
   243PackageName: github.com/cyberphone/json-canonicalization
   244SPDXID: SPDXRef-Package-github.com.cyberphone.json-canonicalization-v0.0.0-20210303052042-6bc126869bf4
   245PackageVersion: v0.0.0-20210303052042-6bc126869bf4
   246PackageSupplier: NOASSERTION
   247PackageDownloadLocation: NOASSERTION
   248FilesAnalyzed: false
   249PackageChecksum: SHA256: c7ebd3e43ca55f29f282acbf5e9194741d64f027cf57cc6d8136c0e6a30451a6
   250PackageHomePage: https://github.com/cyberphone/json-canonicalization
   251PackageLicenseConcluded: NOASSERTION
   252PackageLicenseDeclared: NOASSERTION
   253PackageCopyrightText: NOASSERTION
   254PackageLicenseComments: NOASSERTION
   255PackageComment: NOASSERTION
   256
   257##### Package representing the github.com/asaskevich/govalidator
   258
   259PackageName: github.com/asaskevich/govalidator
   260SPDXID: SPDXRef-Package-github.com.asaskevich.govalidator-v0.0.0-20210307081110-f21760c49a8d
   261PackageVersion: v0.0.0-20210307081110-f21760c49a8d
   262PackageSupplier: NOASSERTION
   263PackageDownloadLocation: NOASSERTION
   264FilesAnalyzed: false
   265PackageChecksum: SHA256: 903cd7f5e7c6ac40eb2de2d6dfe3be0622f9bce5ad6c422fad4966939fcabf94
   266PackageHomePage: https://github.com/asaskevich/govalidator
   267PackageLicenseConcluded: NOASSERTION
   268PackageLicenseDeclared: NOASSERTION
   269PackageCopyrightText: NOASSERTION
   270PackageLicenseComments: NOASSERTION
   271PackageComment: NOASSERTION
   272
   273##### Package representing the github.com/go-openapi/errors
   274
   275PackageName: github.com/go-openapi/errors
   276SPDXID: SPDXRef-Package-github.com.go-openapi.errors-v0.20.0
   277PackageVersion: v0.20.0
   278PackageSupplier: NOASSERTION
   279PackageDownloadLocation: NOASSERTION
   280FilesAnalyzed: false
   281PackageChecksum: SHA256: 51ad642cf65adce9300b5ea390808246e8feeed0bcd81fbbb88e1b070a1238d2
   282PackageHomePage: https://github.com/go-openapi/errors
   283PackageLicenseConcluded: NOASSERTION
   284PackageLicenseDeclared: NOASSERTION
   285PackageCopyrightText: NOASSERTION
   286PackageLicenseComments: NOASSERTION
   287PackageComment: NOASSERTION
   288
   289Relationship SPDXRef-Package-github.com.go-openapi.errors-v0.20.0 DEPENDS_ON SPDXRef-Package-github.com.davecgh.go-spew-v1.1.1 
   290
   291##### Package representing the github.com/mitchellh/mapstructure
   292
   293PackageName: github.com/mitchellh/mapstructure
   294SPDXID: SPDXRef-Package-github.com.mitchellh.mapstructure-v1.4.1
   295PackageVersion: v1.4.1
   296PackageSupplier: NOASSERTION
   297PackageDownloadLocation: NOASSERTION
   298FilesAnalyzed: false
   299PackageChecksum: SHA256: 3b17e495d6eceeb7e78bedaca087bcfc81f454c9a8dbce3ccec9071a0ecea479
   300PackageHomePage: https://github.com/mitchellh/mapstructure
   301PackageLicenseConcluded: NOASSERTION
   302PackageLicenseDeclared: NOASSERTION
   303PackageCopyrightText: NOASSERTION
   304PackageLicenseComments: NOASSERTION
   305PackageComment: NOASSERTION
   306
   307##### Package representing the github.com/oklog/ulid
   308
   309PackageName: github.com/oklog/ulid
   310SPDXID: SPDXRef-Package-github.com.oklog.ulid-v1.3.1
   311PackageVersion: v1.3.1
   312PackageSupplier: NOASSERTION
   313PackageDownloadLocation: NOASSERTION
   314FilesAnalyzed: false
   315PackageChecksum: SHA256: d906eb8403330115effa40cdde3173f4187286eea72acd78a7f0383c437b875d
   316PackageHomePage: https://github.com/oklog/ulid
   317PackageLicenseConcluded: NOASSERTION
   318PackageLicenseDeclared: NOASSERTION
   319PackageCopyrightText: NOASSERTION
   320PackageLicenseComments: NOASSERTION
   321PackageComment: NOASSERTION
   322
   323##### Package representing the go.mongodb.org/mongo-driver
   324
   325PackageName: go.mongodb.org/mongo-driver
   326SPDXID: SPDXRef-Package-go.mongodb.org.mongo-driver-v1.5.3
   327PackageVersion: v1.5.3
   328PackageSupplier: NOASSERTION
   329PackageDownloadLocation: NOASSERTION
   330FilesAnalyzed: false
   331PackageChecksum: SHA256: a4ccad268cfd8a059f9b68ccd6f1ca5ae83cdab8c974dad74d75e53b9748fcb9
   332PackageHomePage: https://go.mongodb.org/mongo-driver
   333PackageLicenseConcluded: NOASSERTION
   334PackageLicenseDeclared: NOASSERTION
   335PackageCopyrightText: NOASSERTION
   336PackageLicenseComments: NOASSERTION
   337PackageComment: NOASSERTION
   338
   339Relationship SPDXRef-Package-go.mongodb.org.mongo-driver-v1.5.3 DEPENDS_ON SPDXRef-Package-golang.org.x.sys-v0.0.0-20210615035016-665e8c7367d1 
   340Relationship SPDXRef-Package-go.mongodb.org.mongo-driver-v1.5.3 DEPENDS_ON SPDXRef-Package-github.com.go-stack.stack-v1.8.0 
   341Relationship SPDXRef-Package-go.mongodb.org.mongo-driver-v1.5.3 DEPENDS_ON SPDXRef-Package-github.com.golang.snappy-v0.0.3 
   342Relationship SPDXRef-Package-go.mongodb.org.mongo-driver-v1.5.3 DEPENDS_ON SPDXRef-Package-github.com.google.go-cmp-v0.5.6 
   343Relationship SPDXRef-Package-go.mongodb.org.mongo-driver-v1.5.3 DEPENDS_ON SPDXRef-Package-github.com.pkg.errors-v0.9.1 
   344Relationship SPDXRef-Package-go.mongodb.org.mongo-driver-v1.5.3 DEPENDS_ON SPDXRef-Package-github.com.sirupsen.logrus-v1.8.1 
   345Relationship SPDXRef-Package-go.mongodb.org.mongo-driver-v1.5.3 DEPENDS_ON SPDXRef-Package-golang.org.x.crypto-v0.0.0-20210616213533-5ff15b29337e 
   346Relationship SPDXRef-Package-go.mongodb.org.mongo-driver-v1.5.3 DEPENDS_ON SPDXRef-Package-golang.org.x.sync-v0.0.0-20210220032951-036812b2e83c 
   347Relationship SPDXRef-Package-go.mongodb.org.mongo-driver-v1.5.3 DEPENDS_ON SPDXRef-Package-github.com.pelletier.go-toml-v1.9.3 
   348Relationship SPDXRef-Package-go.mongodb.org.mongo-driver-v1.5.3 DEPENDS_ON SPDXRef-Package-golang.org.x.text-v0.3.6 
   349
   350##### Package representing the github.com/go-stack/stack
   351
   352PackageName: github.com/go-stack/stack
   353SPDXID: SPDXRef-Package-github.com.go-stack.stack-v1.8.0
   354PackageVersion: v1.8.0
   355PackageSupplier: NOASSERTION
   356PackageDownloadLocation: NOASSERTION
   357FilesAnalyzed: false
   358PackageChecksum: SHA256: fd3f25fb63423cea94320198b7efaa88ed8e38cd2862f1be66b644e263c751d9
   359PackageHomePage: https://github.com/go-stack/stack
   360PackageLicenseConcluded: NOASSERTION
   361PackageLicenseDeclared: NOASSERTION
   362PackageCopyrightText: NOASSERTION
   363PackageLicenseComments: NOASSERTION
   364PackageComment: NOASSERTION
   365
   366##### Package representing the github.com/go-openapi/strfmt
   367
   368PackageName: github.com/go-openapi/strfmt
   369SPDXID: SPDXRef-Package-github.com.go-openapi.strfmt-v0.20.1
   370PackageVersion: v0.20.1
   371PackageSupplier: NOASSERTION
   372PackageDownloadLocation: NOASSERTION
   373FilesAnalyzed: false
   374PackageChecksum: SHA256: 60fb8854b5971069860ab2102510a7eb28790a49eb2fb9d1aeb98a3f34833525
   375PackageHomePage: https://github.com/go-openapi/strfmt
   376PackageLicenseConcluded: NOASSERTION
   377PackageLicenseDeclared: NOASSERTION
   378PackageCopyrightText: NOASSERTION
   379PackageLicenseComments: NOASSERTION
   380PackageComment: NOASSERTION
   381
   382Relationship SPDXRef-Package-github.com.go-openapi.strfmt-v0.20.1 DEPENDS_ON SPDXRef-Package-github.com.mitchellh.mapstructure-v1.4.1 
   383Relationship SPDXRef-Package-github.com.go-openapi.strfmt-v0.20.1 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.errors-v0.20.0 
   384Relationship SPDXRef-Package-github.com.go-openapi.strfmt-v0.20.1 DEPENDS_ON SPDXRef-Package-github.com.davecgh.go-spew-v1.1.1 
   385Relationship SPDXRef-Package-github.com.go-openapi.strfmt-v0.20.1 DEPENDS_ON SPDXRef-Package-github.com.asaskevich.govalidator-v0.0.0-20210307081110-f21760c49a8d 
   386Relationship SPDXRef-Package-github.com.go-openapi.strfmt-v0.20.1 DEPENDS_ON SPDXRef-Package-go.mongodb.org.mongo-driver-v1.5.3 
   387Relationship SPDXRef-Package-github.com.go-openapi.strfmt-v0.20.1 DEPENDS_ON SPDXRef-Package-github.com.oklog.ulid-v1.3.1 
   388Relationship SPDXRef-Package-github.com.go-openapi.strfmt-v0.20.1 DEPENDS_ON SPDXRef-Package-github.com.mailru.easyjson-v0.7.7 
   389Relationship SPDXRef-Package-github.com.go-openapi.strfmt-v0.20.1 DEPENDS_ON SPDXRef-Package-github.com.go-stack.stack-v1.8.0 
   390Relationship SPDXRef-Package-github.com.go-openapi.strfmt-v0.20.1 DEPENDS_ON SPDXRef-Package-github.com.google.go-cmp-v0.5.6 
   391
   392##### Package representing the github.com/josharian/intern
   393
   394PackageName: github.com/josharian/intern
   395SPDXID: SPDXRef-Package-github.com.josharian.intern-v1.0.0
   396PackageVersion: v1.0.0
   397PackageSupplier: NOASSERTION
   398PackageDownloadLocation: NOASSERTION
   399FilesAnalyzed: false
   400PackageChecksum: SHA256: 02952b87b56340b825e2381df45a0b5eff5dd1bf290fdfada7dbe6e993a42076
   401PackageHomePage: https://github.com/josharian/intern
   402PackageLicenseConcluded: NOASSERTION
   403PackageLicenseDeclared: NOASSERTION
   404PackageCopyrightText: NOASSERTION
   405PackageLicenseComments: NOASSERTION
   406PackageComment: NOASSERTION
   407
   408##### Package representing the github.com/mailru/easyjson
   409
   410PackageName: github.com/mailru/easyjson
   411SPDXID: SPDXRef-Package-github.com.mailru.easyjson-v0.7.7
   412PackageVersion: v0.7.7
   413PackageSupplier: NOASSERTION
   414PackageDownloadLocation: NOASSERTION
   415FilesAnalyzed: false
   416PackageChecksum: SHA256: 827a48dc29ec1ff4c2b1ec78221db470416ed364dac6a878893e9d21cefa6918
   417PackageHomePage: https://github.com/mailru/easyjson
   418PackageLicenseConcluded: NOASSERTION
   419PackageLicenseDeclared: NOASSERTION
   420PackageCopyrightText: NOASSERTION
   421PackageLicenseComments: NOASSERTION
   422PackageComment: NOASSERTION
   423
   424Relationship SPDXRef-Package-github.com.mailru.easyjson-v0.7.7 DEPENDS_ON SPDXRef-Package-github.com.josharian.intern-v1.0.0 
   425
   426##### Package representing the gopkg.in/yaml.v2
   427
   428PackageName: gopkg.in/yaml.v2
   429SPDXID: SPDXRef-Package-gopkg.in.yaml.v2-v2.4.0
   430PackageVersion: v2.4.0
   431PackageSupplier: NOASSERTION
   432PackageDownloadLocation: NOASSERTION
   433FilesAnalyzed: false
   434PackageChecksum: SHA256: 3aed1e3fc7b0a044fb38213f8c11cb20d5b45fd673e45de14c537648c446e6be
   435PackageHomePage: https://gopkg.in/yaml.v2
   436PackageLicenseConcluded: NOASSERTION
   437PackageLicenseDeclared: NOASSERTION
   438PackageCopyrightText: NOASSERTION
   439PackageLicenseComments: NOASSERTION
   440PackageComment: NOASSERTION
   441
   442##### Package representing the github.com/go-openapi/swag
   443
   444PackageName: github.com/go-openapi/swag
   445SPDXID: SPDXRef-Package-github.com.go-openapi.swag-v0.19.15
   446PackageVersion: v0.19.15
   447PackageSupplier: NOASSERTION
   448PackageDownloadLocation: NOASSERTION
   449FilesAnalyzed: false
   450PackageChecksum: SHA256: e725f85ebbbcc1e303a950fe6dfb589e4a6003989316fda6ac5514b818bc0830
   451PackageHomePage: https://github.com/go-openapi/swag
   452PackageLicenseConcluded: NOASSERTION
   453PackageLicenseDeclared: NOASSERTION
   454PackageCopyrightText: NOASSERTION
   455PackageLicenseComments: NOASSERTION
   456PackageComment: NOASSERTION
   457
   458Relationship SPDXRef-Package-github.com.go-openapi.swag-v0.19.15 DEPENDS_ON SPDXRef-Package-gopkg.in.yaml.v2-v2.4.0 
   459Relationship SPDXRef-Package-github.com.go-openapi.swag-v0.19.15 DEPENDS_ON SPDXRef-Package-github.com.mailru.easyjson-v0.7.7 
   460Relationship SPDXRef-Package-github.com.go-openapi.swag-v0.19.15 DEPENDS_ON SPDXRef-Package-github.com.davecgh.go-spew-v1.1.1 
   461
   462##### Package representing the github.com/google/trillian
   463
   464PackageName: github.com/google/trillian
   465SPDXID: SPDXRef-Package-github.com.google.trillian-v1.3.14-0.20210413093047-5e12fb368c8f
   466PackageVersion: v1.3.14-0.20210413093047-5e12fb368c8f
   467PackageSupplier: NOASSERTION
   468PackageDownloadLocation: NOASSERTION
   469FilesAnalyzed: false
   470PackageChecksum: SHA256: 4dab9fd4947a0cb0710d75145cf7eeb32462b10c5a422170dff8aa54f0b64ae3
   471PackageHomePage: https://github.com/google/trillian
   472PackageLicenseConcluded: NOASSERTION
   473PackageLicenseDeclared: NOASSERTION
   474PackageCopyrightText: NOASSERTION
   475PackageLicenseComments: NOASSERTION
   476PackageComment: NOASSERTION
   477
   478Relationship SPDXRef-Package-github.com.google.trillian-v1.3.14-0.20210413093047-5e12fb368c8f DEPENDS_ON SPDXRef-Package-github.com.olekukonko.tablewriter-v0.0.5 
   479Relationship SPDXRef-Package-github.com.google.trillian-v1.3.14-0.20210413093047-5e12fb368c8f DEPENDS_ON SPDXRef-Package-github.com.prometheus.client-golang-v1.11.0 
   480Relationship SPDXRef-Package-github.com.google.trillian-v1.3.14-0.20210413093047-5e12fb368c8f DEPENDS_ON SPDXRef-Package-github.com.prometheus.client-model-v0.2.0 
   481Relationship SPDXRef-Package-github.com.google.trillian-v1.3.14-0.20210413093047-5e12fb368c8f DEPENDS_ON SPDXRef-Package-golang.org.x.crypto-v0.0.0-20210616213533-5ff15b29337e 
   482Relationship SPDXRef-Package-github.com.google.trillian-v1.3.14-0.20210413093047-5e12fb368c8f DEPENDS_ON SPDXRef-Package-google.golang.org.grpc-v1.38.0 
   483Relationship SPDXRef-Package-github.com.google.trillian-v1.3.14-0.20210413093047-5e12fb368c8f DEPENDS_ON SPDXRef-Package-go.uber.org.zap-v1.16.0 
   484Relationship SPDXRef-Package-github.com.google.trillian-v1.3.14-0.20210413093047-5e12fb368c8f DEPENDS_ON SPDXRef-Package-github.com.google.certificate-transparency-go-v1.1.1 
   485Relationship SPDXRef-Package-github.com.google.trillian-v1.3.14-0.20210413093047-5e12fb368c8f DEPENDS_ON SPDXRef-Package-github.com.mattn.go-runewidth-v0.0.9 
   486Relationship SPDXRef-Package-github.com.google.trillian-v1.3.14-0.20210413093047-5e12fb368c8f DEPENDS_ON SPDXRef-Package-github.com.spf13.cobra-v1.1.3 
   487Relationship SPDXRef-Package-github.com.google.trillian-v1.3.14-0.20210413093047-5e12fb368c8f DEPENDS_ON SPDXRef-Package-go.opencensus.io-v0.23.0 
   488Relationship SPDXRef-Package-github.com.google.trillian-v1.3.14-0.20210413093047-5e12fb368c8f DEPENDS_ON SPDXRef-Package-go.uber.org.multierr-v1.7.0 
   489Relationship SPDXRef-Package-github.com.google.trillian-v1.3.14-0.20210413093047-5e12fb368c8f DEPENDS_ON SPDXRef-Package-golang.org.x.sync-v0.0.0-20210220032951-036812b2e83c 
   490Relationship SPDXRef-Package-github.com.google.trillian-v1.3.14-0.20210413093047-5e12fb368c8f DEPENDS_ON SPDXRef-Package-golang.org.x.time-v0.0.0-20210220033141-f8bda1e9f3ba 
   491Relationship SPDXRef-Package-github.com.google.trillian-v1.3.14-0.20210413093047-5e12fb368c8f DEPENDS_ON SPDXRef-Package-google.golang.org.genproto-v0.0.0-20210617175327-b9e0b3197ced 
   492Relationship SPDXRef-Package-github.com.google.trillian-v1.3.14-0.20210413093047-5e12fb368c8f DEPENDS_ON SPDXRef-Package-github.com.golang.protobuf-v1.5.2 
   493Relationship SPDXRef-Package-github.com.google.trillian-v1.3.14-0.20210413093047-5e12fb368c8f DEPENDS_ON SPDXRef-Package-github.com.google.go-cmp-v0.5.6 
   494Relationship SPDXRef-Package-github.com.google.trillian-v1.3.14-0.20210413093047-5e12fb368c8f DEPENDS_ON SPDXRef-Package-golang.org.x.sys-v0.0.0-20210615035016-665e8c7367d1 
   495Relationship SPDXRef-Package-github.com.google.trillian-v1.3.14-0.20210413093047-5e12fb368c8f DEPENDS_ON SPDXRef-Package-gopkg.in.yaml.v2-v2.4.0 
   496Relationship SPDXRef-Package-github.com.google.trillian-v1.3.14-0.20210413093047-5e12fb368c8f DEPENDS_ON SPDXRef-Package-github.com.gogo.protobuf-v1.3.2 
   497Relationship SPDXRef-Package-github.com.google.trillian-v1.3.14-0.20210413093047-5e12fb368c8f DEPENDS_ON SPDXRef-Package-github.com.spf13.pflag-v1.0.5 
   498Relationship SPDXRef-Package-github.com.google.trillian-v1.3.14-0.20210413093047-5e12fb368c8f DEPENDS_ON SPDXRef-Package-google.golang.org.protobuf-v1.26.0 
   499Relationship SPDXRef-Package-github.com.google.trillian-v1.3.14-0.20210413093047-5e12fb368c8f DEPENDS_ON SPDXRef-Package-github.com.imdario.mergo-v0.3.9 
   500Relationship SPDXRef-Package-github.com.google.trillian-v1.3.14-0.20210413093047-5e12fb368c8f DEPENDS_ON SPDXRef-Package-google.golang.org.api-v0.46.0 
   501
   502##### Package representing the github.com/containerd/stargz-snapshotter/estargz
   503
   504PackageName: github.com/containerd/stargz-snapshotter/estargz
   505SPDXID: SPDXRef-Package-github.com.containerd.stargz-snapshotter.estargz-v0.4.1
   506PackageVersion: v0.4.1
   507PackageSupplier: NOASSERTION
   508PackageDownloadLocation: NOASSERTION
   509FilesAnalyzed: false
   510PackageChecksum: SHA256: 7c5efb46f869997b7bd0902b05024d6b3d8575e9d42a5ea11e37855aa8a8f8ae
   511PackageHomePage: https://github.com/containerd/stargz-snapshotter/estargz
   512PackageLicenseConcluded: NOASSERTION
   513PackageLicenseDeclared: NOASSERTION
   514PackageCopyrightText: NOASSERTION
   515PackageLicenseComments: NOASSERTION
   516PackageComment: NOASSERTION
   517
   518Relationship SPDXRef-Package-github.com.containerd.stargz-snapshotter.estargz-v0.4.1 DEPENDS_ON SPDXRef-Package-github.com.opencontainers.go-digest-v1.0.0 
   519Relationship SPDXRef-Package-github.com.containerd.stargz-snapshotter.estargz-v0.4.1 DEPENDS_ON SPDXRef-Package-golang.org.x.sync-v0.0.0-20210220032951-036812b2e83c 
   520Relationship SPDXRef-Package-github.com.containerd.stargz-snapshotter.estargz-v0.4.1 DEPENDS_ON SPDXRef-Package-github.com.pkg.errors-v0.9.1 
   521
   522##### Package representing the github.com/sigstore/sigstore
   523
   524PackageName: github.com/sigstore/sigstore
   525SPDXID: SPDXRef-Package-github.com.sigstore.sigstore-v0.0.0-20210609084117-386ea718fc64
   526PackageVersion: v0.0.0-20210609084117-386ea718fc64
   527PackageSupplier: NOASSERTION
   528PackageDownloadLocation: NOASSERTION
   529FilesAnalyzed: false
   530PackageChecksum: SHA256: ce32f696897cc9eea099740ba18e1f2e345516f1c1a8ddf294c2662a7fca2c68
   531PackageHomePage: https://github.com/sigstore/sigstore
   532PackageLicenseConcluded: NOASSERTION
   533PackageLicenseDeclared: NOASSERTION
   534PackageCopyrightText: NOASSERTION
   535PackageLicenseComments: NOASSERTION
   536PackageComment: NOASSERTION
   537
   538Relationship SPDXRef-Package-github.com.sigstore.sigstore-v0.0.0-20210609084117-386ea718fc64 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.swag-v0.19.15 
   539Relationship SPDXRef-Package-github.com.sigstore.sigstore-v0.0.0-20210609084117-386ea718fc64 DEPENDS_ON SPDXRef-Package-github.com.google.go-containerregistry-v0.5.1 
   540Relationship SPDXRef-Package-github.com.sigstore.sigstore-v0.0.0-20210609084117-386ea718fc64 DEPENDS_ON SPDXRef-Package-golang.org.x.time-v0.0.0-20210220033141-f8bda1e9f3ba 
   541Relationship SPDXRef-Package-github.com.sigstore.sigstore-v0.0.0-20210609084117-386ea718fc64 DEPENDS_ON SPDXRef-Package-github.com.hashicorp.vault.sdk-v0.2.0 
   542Relationship SPDXRef-Package-github.com.sigstore.sigstore-v0.0.0-20210609084117-386ea718fc64 DEPENDS_ON SPDXRef-Package-github.com.asaskevich.govalidator-v0.0.0-20210307081110-f21760c49a8d 
   543Relationship SPDXRef-Package-github.com.sigstore.sigstore-v0.0.0-20210609084117-386ea718fc64 DEPENDS_ON SPDXRef-Package-github.com.pkg.errors-v0.9.1 
   544Relationship SPDXRef-Package-github.com.sigstore.sigstore-v0.0.0-20210609084117-386ea718fc64 DEPENDS_ON SPDXRef-Package-google.golang.org.protobuf-v1.26.0 
   545Relationship SPDXRef-Package-github.com.sigstore.sigstore-v0.0.0-20210609084117-386ea718fc64 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.strfmt-v0.20.1 
   546Relationship SPDXRef-Package-github.com.sigstore.sigstore-v0.0.0-20210609084117-386ea718fc64 DEPENDS_ON SPDXRef-Package-github.com.google.trillian-v1.3.14-0.20210413093047-5e12fb368c8f 
   547Relationship SPDXRef-Package-github.com.sigstore.sigstore-v0.0.0-20210609084117-386ea718fc64 DEPENDS_ON SPDXRef-Package-github.com.spf13.cobra-v1.1.3 
   548Relationship SPDXRef-Package-github.com.sigstore.sigstore-v0.0.0-20210609084117-386ea718fc64 DEPENDS_ON SPDXRef-Package-golang.org.x.crypto-v0.0.0-20210616213533-5ff15b29337e 
   549Relationship SPDXRef-Package-github.com.sigstore.sigstore-v0.0.0-20210609084117-386ea718fc64 DEPENDS_ON SPDXRef-Package-github.com.pierrec.lz4-v2.6.0+incompatible 
   550Relationship SPDXRef-Package-github.com.sigstore.sigstore-v0.0.0-20210609084117-386ea718fc64 DEPENDS_ON SPDXRef-Package-github.com.hashicorp.vault.api-v1.1.0 
   551Relationship SPDXRef-Package-github.com.sigstore.sigstore-v0.0.0-20210609084117-386ea718fc64 DEPENDS_ON SPDXRef-Package-github.com.hashicorp.errwrap-v1.1.0 
   552Relationship SPDXRef-Package-github.com.sigstore.sigstore-v0.0.0-20210609084117-386ea718fc64 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.errors-v0.20.0 
   553Relationship SPDXRef-Package-github.com.sigstore.sigstore-v0.0.0-20210609084117-386ea718fc64 DEPENDS_ON SPDXRef-Package-github.com.golang.protobuf-v1.5.2 
   554Relationship SPDXRef-Package-github.com.sigstore.sigstore-v0.0.0-20210609084117-386ea718fc64 DEPENDS_ON SPDXRef-Package-gopkg.in.square.go-jose.v2-v2.5.1 
   555Relationship SPDXRef-Package-github.com.sigstore.sigstore-v0.0.0-20210609084117-386ea718fc64 DEPENDS_ON SPDXRef-Package-github.com.hashicorp.go-multierror-v1.1.1 
   556Relationship SPDXRef-Package-github.com.sigstore.sigstore-v0.0.0-20210609084117-386ea718fc64 DEPENDS_ON SPDXRef-Package-github.com.hashicorp.go-cleanhttp-v0.5.2 
   557Relationship SPDXRef-Package-github.com.sigstore.sigstore-v0.0.0-20210609084117-386ea718fc64 DEPENDS_ON SPDXRef-Package-github.com.segmentio.ksuid-v1.0.3 
   558Relationship SPDXRef-Package-github.com.sigstore.sigstore-v0.0.0-20210609084117-386ea718fc64 DEPENDS_ON SPDXRef-Package-cloud.google.com.go-v0.81.0 
   559Relationship SPDXRef-Package-github.com.sigstore.sigstore-v0.0.0-20210609084117-386ea718fc64 DEPENDS_ON SPDXRef-Package-github.com.coreos.go-oidc.v3-v3.0.0 
   560Relationship SPDXRef-Package-github.com.sigstore.sigstore-v0.0.0-20210609084117-386ea718fc64 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.validate-v0.20.2 
   561Relationship SPDXRef-Package-github.com.sigstore.sigstore-v0.0.0-20210609084117-386ea718fc64 DEPENDS_ON SPDXRef-Package-golang.org.x.oauth2-v0.0.0-20210514164344-f6687ab2804c 
   562Relationship SPDXRef-Package-github.com.sigstore.sigstore-v0.0.0-20210609084117-386ea718fc64 DEPENDS_ON SPDXRef-Package-golang.org.x.sys-v0.0.0-20210615035016-665e8c7367d1 
   563Relationship SPDXRef-Package-github.com.sigstore.sigstore-v0.0.0-20210609084117-386ea718fc64 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.runtime-v0.19.29 
   564Relationship SPDXRef-Package-github.com.sigstore.sigstore-v0.0.0-20210609084117-386ea718fc64 DEPENDS_ON SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 
   565Relationship SPDXRef-Package-github.com.sigstore.sigstore-v0.0.0-20210609084117-386ea718fc64 DEPENDS_ON SPDXRef-Package-github.com.mitchellh.go-homedir-v1.1.0 
   566Relationship SPDXRef-Package-github.com.sigstore.sigstore-v0.0.0-20210609084117-386ea718fc64 DEPENDS_ON SPDXRef-Package-github.com.skratchdot.open-golang-v0.0.0-20200116055534-eef842397966 
   567Relationship SPDXRef-Package-github.com.sigstore.sigstore-v0.0.0-20210609084117-386ea718fc64 DEPENDS_ON SPDXRef-Package-github.com.spf13.viper-v1.7.1 
   568Relationship SPDXRef-Package-github.com.sigstore.sigstore-v0.0.0-20210609084117-386ea718fc64 DEPENDS_ON SPDXRef-Package-golang.org.x.net-v0.0.0-20210525063256-abc453219eb5 
   569Relationship SPDXRef-Package-github.com.sigstore.sigstore-v0.0.0-20210609084117-386ea718fc64 DEPENDS_ON SPDXRef-Package-google.golang.org.genproto-v0.0.0-20210617175327-b9e0b3197ced 
   570Relationship SPDXRef-Package-github.com.sigstore.sigstore-v0.0.0-20210609084117-386ea718fc64 DEPENDS_ON SPDXRef-Package-github.com.hashicorp.go-retryablehttp-v0.6.8 
   571Relationship SPDXRef-Package-github.com.sigstore.sigstore-v0.0.0-20210609084117-386ea718fc64 DEPENDS_ON SPDXRef-Package-github.com.golang.snappy-v0.0.3 
   572
   573##### Package representing the github.com/go-openapi/runtime
   574
   575PackageName: github.com/go-openapi/runtime
   576SPDXID: SPDXRef-Package-github.com.go-openapi.runtime-v0.19.29
   577PackageVersion: v0.19.29
   578PackageSupplier: NOASSERTION
   579PackageDownloadLocation: NOASSERTION
   580FilesAnalyzed: false
   581PackageChecksum: SHA256: 06262c89eea66a0d240bb2e2dcf20608e29cee7d946804545266e2e195f0399c
   582PackageHomePage: https://github.com/go-openapi/runtime
   583PackageLicenseConcluded: NOASSERTION
   584PackageLicenseDeclared: NOASSERTION
   585PackageCopyrightText: NOASSERTION
   586PackageLicenseComments: NOASSERTION
   587PackageComment: NOASSERTION
   588
   589Relationship SPDXRef-Package-github.com.go-openapi.runtime-v0.19.29 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.swag-v0.19.15 
   590Relationship SPDXRef-Package-github.com.go-openapi.runtime-v0.19.29 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.validate-v0.20.2 
   591Relationship SPDXRef-Package-github.com.go-openapi.runtime-v0.19.29 DEPENDS_ON SPDXRef-Package-github.com.opentracing.opentracing-go-v1.2.0 
   592Relationship SPDXRef-Package-github.com.go-openapi.runtime-v0.19.29 DEPENDS_ON SPDXRef-Package-gopkg.in.yaml.v2-v2.4.0 
   593Relationship SPDXRef-Package-github.com.go-openapi.runtime-v0.19.29 DEPENDS_ON SPDXRef-Package-golang.org.x.crypto-v0.0.0-20210616213533-5ff15b29337e 
   594Relationship SPDXRef-Package-github.com.go-openapi.runtime-v0.19.29 DEPENDS_ON SPDXRef-Package-go.mongodb.org.mongo-driver-v1.5.3 
   595Relationship SPDXRef-Package-github.com.go-openapi.runtime-v0.19.29 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.analysis-v0.20.1 
   596Relationship SPDXRef-Package-github.com.go-openapi.runtime-v0.19.29 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.strfmt-v0.20.1 
   597Relationship SPDXRef-Package-github.com.go-openapi.runtime-v0.19.29 DEPENDS_ON SPDXRef-Package-golang.org.x.sys-v0.0.0-20210615035016-665e8c7367d1 
   598Relationship SPDXRef-Package-github.com.go-openapi.runtime-v0.19.29 DEPENDS_ON SPDXRef-Package-github.com.PuerkitoBio.purell-v1.1.1 
   599Relationship SPDXRef-Package-github.com.go-openapi.runtime-v0.19.29 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.jsonpointer-v0.19.5 
   600Relationship SPDXRef-Package-github.com.go-openapi.runtime-v0.19.29 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.loads-v0.20.2 
   601Relationship SPDXRef-Package-github.com.go-openapi.runtime-v0.19.29 DEPENDS_ON SPDXRef-Package-github.com.asaskevich.govalidator-v0.0.0-20210307081110-f21760c49a8d 
   602Relationship SPDXRef-Package-github.com.go-openapi.runtime-v0.19.29 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.spec-v0.20.3 
   603Relationship SPDXRef-Package-github.com.go-openapi.runtime-v0.19.29 DEPENDS_ON SPDXRef-Package-golang.org.x.net-v0.0.0-20210525063256-abc453219eb5 
   604Relationship SPDXRef-Package-github.com.go-openapi.runtime-v0.19.29 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.jsonreference-v0.19.5 
   605Relationship SPDXRef-Package-github.com.go-openapi.runtime-v0.19.29 DEPENDS_ON SPDXRef-Package-github.com.mailru.easyjson-v0.7.7 
   606Relationship SPDXRef-Package-github.com.go-openapi.runtime-v0.19.29 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.errors-v0.20.0 
   607Relationship SPDXRef-Package-github.com.go-openapi.runtime-v0.19.29 DEPENDS_ON SPDXRef-Package-github.com.mitchellh.mapstructure-v1.4.1 
   608
   609##### Package representing the github.com/go-openapi/analysis
   610
   611PackageName: github.com/go-openapi/analysis
   612SPDXID: SPDXRef-Package-github.com.go-openapi.analysis-v0.20.1
   613PackageVersion: v0.20.1
   614PackageSupplier: NOASSERTION
   615PackageDownloadLocation: NOASSERTION
   616FilesAnalyzed: false
   617PackageChecksum: SHA256: 44e10c5f201ef8dd4a7700d7a8729665fe0b8e22a506c381cda0f1b95d2cbf7f
   618PackageHomePage: https://github.com/go-openapi/analysis
   619PackageLicenseConcluded: NOASSERTION
   620PackageLicenseDeclared: NOASSERTION
   621PackageCopyrightText: NOASSERTION
   622PackageLicenseComments: NOASSERTION
   623PackageComment: NOASSERTION
   624
   625Relationship SPDXRef-Package-github.com.go-openapi.analysis-v0.20.1 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.strfmt-v0.20.1 
   626Relationship SPDXRef-Package-github.com.go-openapi.analysis-v0.20.1 DEPENDS_ON SPDXRef-Package-github.com.mitchellh.mapstructure-v1.4.1 
   627Relationship SPDXRef-Package-github.com.go-openapi.analysis-v0.20.1 DEPENDS_ON SPDXRef-Package-go.mongodb.org.mongo-driver-v1.5.3 
   628Relationship SPDXRef-Package-github.com.go-openapi.analysis-v0.20.1 DEPENDS_ON SPDXRef-Package-golang.org.x.crypto-v0.0.0-20210616213533-5ff15b29337e 
   629Relationship SPDXRef-Package-github.com.go-openapi.analysis-v0.20.1 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.loads-v0.20.2 
   630Relationship SPDXRef-Package-github.com.go-openapi.analysis-v0.20.1 DEPENDS_ON SPDXRef-Package-golang.org.x.net-v0.0.0-20210525063256-abc453219eb5 
   631Relationship SPDXRef-Package-github.com.go-openapi.analysis-v0.20.1 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.jsonreference-v0.19.5 
   632Relationship SPDXRef-Package-github.com.go-openapi.analysis-v0.20.1 DEPENDS_ON SPDXRef-Package-github.com.asaskevich.govalidator-v0.0.0-20210307081110-f21760c49a8d 
   633Relationship SPDXRef-Package-github.com.go-openapi.analysis-v0.20.1 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.errors-v0.20.0 
   634Relationship SPDXRef-Package-github.com.go-openapi.analysis-v0.20.1 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.jsonpointer-v0.19.5 
   635Relationship SPDXRef-Package-github.com.go-openapi.analysis-v0.20.1 DEPENDS_ON SPDXRef-Package-gopkg.in.yaml.v2-v2.4.0 
   636Relationship SPDXRef-Package-github.com.go-openapi.analysis-v0.20.1 DEPENDS_ON SPDXRef-Package-golang.org.x.sys-v0.0.0-20210615035016-665e8c7367d1 
   637Relationship SPDXRef-Package-github.com.go-openapi.analysis-v0.20.1 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.spec-v0.20.3 
   638Relationship SPDXRef-Package-github.com.go-openapi.analysis-v0.20.1 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.swag-v0.19.15 
   639Relationship SPDXRef-Package-github.com.go-openapi.analysis-v0.20.1 DEPENDS_ON SPDXRef-Package-github.com.mailru.easyjson-v0.7.7 
   640
   641##### Package representing the github.com/go-openapi/jsonpointer
   642
   643PackageName: github.com/go-openapi/jsonpointer
   644SPDXID: SPDXRef-Package-github.com.go-openapi.jsonpointer-v0.19.5
   645PackageVersion: v0.19.5
   646PackageSupplier: NOASSERTION
   647PackageDownloadLocation: NOASSERTION
   648FilesAnalyzed: false
   649PackageChecksum: SHA256: 1d3f0415980a62cec07254fc3e99ff4aebaa1f510b37968d6c44f7755520f3f0
   650PackageHomePage: https://github.com/go-openapi/jsonpointer
   651PackageLicenseConcluded: NOASSERTION
   652PackageLicenseDeclared: NOASSERTION
   653PackageCopyrightText: NOASSERTION
   654PackageLicenseComments: NOASSERTION
   655PackageComment: NOASSERTION
   656
   657Relationship SPDXRef-Package-github.com.go-openapi.jsonpointer-v0.19.5 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.swag-v0.19.15 
   658Relationship SPDXRef-Package-github.com.go-openapi.jsonpointer-v0.19.5 DEPENDS_ON SPDXRef-Package-github.com.mailru.easyjson-v0.7.7 
   659Relationship SPDXRef-Package-github.com.go-openapi.jsonpointer-v0.19.5 DEPENDS_ON SPDXRef-Package-gopkg.in.yaml.v2-v2.4.0 
   660Relationship SPDXRef-Package-github.com.go-openapi.jsonpointer-v0.19.5 DEPENDS_ON SPDXRef-Package-github.com.davecgh.go-spew-v1.1.1 
   661
   662##### Package representing the github.com/PuerkitoBio/urlesc
   663
   664PackageName: github.com/PuerkitoBio/urlesc
   665SPDXID: SPDXRef-Package-github.com.PuerkitoBio.urlesc-v0.0.0-20170810143723-de5bf2ad4578
   666PackageVersion: v0.0.0-20170810143723-de5bf2ad4578
   667PackageSupplier: NOASSERTION
   668PackageDownloadLocation: NOASSERTION
   669FilesAnalyzed: false
   670PackageChecksum: SHA256: cf5a45a083cd213c91fb7d67e61188f8eaa1d362903b9ec91d8cf8d2494a050e
   671PackageHomePage: https://github.com/PuerkitoBio/urlesc
   672PackageLicenseConcluded: NOASSERTION
   673PackageLicenseDeclared: NOASSERTION
   674PackageCopyrightText: NOASSERTION
   675PackageLicenseComments: NOASSERTION
   676PackageComment: NOASSERTION
   677
   678##### Package representing the golang.org/x/text
   679
   680PackageName: golang.org/x/text
   681SPDXID: SPDXRef-Package-golang.org.x.text-v0.3.6
   682PackageVersion: v0.3.6
   683PackageSupplier: NOASSERTION
   684PackageDownloadLocation: NOASSERTION
   685FilesAnalyzed: false
   686PackageChecksum: SHA256: d880df5dea6c92d960d64f6fe6c27d88f226838eccbf4736497a5c9f1f7072fd
   687PackageHomePage: https://golang.org/x/text
   688PackageLicenseConcluded: NOASSERTION
   689PackageLicenseDeclared: NOASSERTION
   690PackageCopyrightText: NOASSERTION
   691PackageLicenseComments: NOASSERTION
   692PackageComment: NOASSERTION
   693
   694##### Package representing the golang.org/x/net
   695
   696PackageName: golang.org/x/net
   697SPDXID: SPDXRef-Package-golang.org.x.net-v0.0.0-20210525063256-abc453219eb5
   698PackageVersion: v0.0.0-20210525063256-abc453219eb5
   699PackageSupplier: NOASSERTION
   700PackageDownloadLocation: NOASSERTION
   701FilesAnalyzed: false
   702PackageChecksum: SHA256: 7796fea5e6483954436c0df99da0a78100ee5157c3b2e8fd99dcdaf157e7e398
   703PackageHomePage: https://golang.org/x/net
   704PackageLicenseConcluded: NOASSERTION
   705PackageLicenseDeclared: NOASSERTION
   706PackageCopyrightText: NOASSERTION
   707PackageLicenseComments: NOASSERTION
   708PackageComment: NOASSERTION
   709
   710Relationship SPDXRef-Package-golang.org.x.net-v0.0.0-20210525063256-abc453219eb5 DEPENDS_ON SPDXRef-Package-golang.org.x.sys-v0.0.0-20210615035016-665e8c7367d1 
   711Relationship SPDXRef-Package-golang.org.x.net-v0.0.0-20210525063256-abc453219eb5 DEPENDS_ON SPDXRef-Package-golang.org.x.term-v0.0.0-20210615171337-6886f2dfbf5b 
   712Relationship SPDXRef-Package-golang.org.x.net-v0.0.0-20210525063256-abc453219eb5 DEPENDS_ON SPDXRef-Package-golang.org.x.text-v0.3.6 
   713Relationship SPDXRef-Package-golang.org.x.net-v0.0.0-20210525063256-abc453219eb5 DEPENDS_ON SPDXRef-Package-golang.org.x.crypto-v0.0.0-20210616213533-5ff15b29337e 
   714
   715##### Package representing the github.com/PuerkitoBio/purell
   716
   717PackageName: github.com/PuerkitoBio/purell
   718SPDXID: SPDXRef-Package-github.com.PuerkitoBio.purell-v1.1.1
   719PackageVersion: v1.1.1
   720PackageSupplier: NOASSERTION
   721PackageDownloadLocation: NOASSERTION
   722FilesAnalyzed: false
   723PackageChecksum: SHA256: 8c01b4b8b4e77bd82080a9a2072c7a9b8539d43b88cd419ee9dc3a04d4b905e0
   724PackageHomePage: https://github.com/PuerkitoBio/purell
   725PackageLicenseConcluded: NOASSERTION
   726PackageLicenseDeclared: NOASSERTION
   727PackageCopyrightText: NOASSERTION
   728PackageLicenseComments: NOASSERTION
   729PackageComment: NOASSERTION
   730
   731##### Package representing the github.com/go-openapi/jsonreference
   732
   733PackageName: github.com/go-openapi/jsonreference
   734SPDXID: SPDXRef-Package-github.com.go-openapi.jsonreference-v0.19.5
   735PackageVersion: v0.19.5
   736PackageSupplier: NOASSERTION
   737PackageDownloadLocation: NOASSERTION
   738FilesAnalyzed: false
   739PackageChecksum: SHA256: c9b645f4b15ac8886ae3f1f2ce467af096ecc6b74d0c89cfcb044ec90a05161a
   740PackageHomePage: https://github.com/go-openapi/jsonreference
   741PackageLicenseConcluded: NOASSERTION
   742PackageLicenseDeclared: NOASSERTION
   743PackageCopyrightText: NOASSERTION
   744PackageLicenseComments: NOASSERTION
   745PackageComment: NOASSERTION
   746
   747Relationship SPDXRef-Package-github.com.go-openapi.jsonreference-v0.19.5 DEPENDS_ON SPDXRef-Package-github.com.PuerkitoBio.urlesc-v0.0.0-20170810143723-de5bf2ad4578 
   748Relationship SPDXRef-Package-github.com.go-openapi.jsonreference-v0.19.5 DEPENDS_ON SPDXRef-Package-gopkg.in.yaml.v2-v2.4.0 
   749Relationship SPDXRef-Package-github.com.go-openapi.jsonreference-v0.19.5 DEPENDS_ON SPDXRef-Package-github.com.mailru.easyjson-v0.7.7 
   750Relationship SPDXRef-Package-github.com.go-openapi.jsonreference-v0.19.5 DEPENDS_ON SPDXRef-Package-github.com.davecgh.go-spew-v1.1.1 
   751Relationship SPDXRef-Package-github.com.go-openapi.jsonreference-v0.19.5 DEPENDS_ON SPDXRef-Package-github.com.PuerkitoBio.purell-v1.1.1 
   752Relationship SPDXRef-Package-github.com.go-openapi.jsonreference-v0.19.5 DEPENDS_ON SPDXRef-Package-golang.org.x.net-v0.0.0-20210525063256-abc453219eb5 
   753Relationship SPDXRef-Package-github.com.go-openapi.jsonreference-v0.19.5 DEPENDS_ON SPDXRef-Package-golang.org.x.text-v0.3.6 
   754Relationship SPDXRef-Package-github.com.go-openapi.jsonreference-v0.19.5 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.swag-v0.19.15 
   755Relationship SPDXRef-Package-github.com.go-openapi.jsonreference-v0.19.5 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.jsonpointer-v0.19.5 
   756
   757##### Package representing the github.com/go-openapi/spec
   758
   759PackageName: github.com/go-openapi/spec
   760SPDXID: SPDXRef-Package-github.com.go-openapi.spec-v0.20.3
   761PackageVersion: v0.20.3
   762PackageSupplier: NOASSERTION
   763PackageDownloadLocation: NOASSERTION
   764FilesAnalyzed: false
   765PackageChecksum: SHA256: de8a34d1f7e6459c9343a159264930fcc394d1cf38d33505638e5713306cf684
   766PackageHomePage: https://github.com/go-openapi/spec
   767PackageLicenseConcluded: NOASSERTION
   768PackageLicenseDeclared: NOASSERTION
   769PackageCopyrightText: NOASSERTION
   770PackageLicenseComments: NOASSERTION
   771PackageComment: NOASSERTION
   772
   773Relationship SPDXRef-Package-github.com.go-openapi.spec-v0.20.3 DEPENDS_ON SPDXRef-Package-golang.org.x.text-v0.3.6 
   774Relationship SPDXRef-Package-github.com.go-openapi.spec-v0.20.3 DEPENDS_ON SPDXRef-Package-github.com.mailru.easyjson-v0.7.7 
   775Relationship SPDXRef-Package-github.com.go-openapi.spec-v0.20.3 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.swag-v0.19.15 
   776Relationship SPDXRef-Package-github.com.go-openapi.spec-v0.20.3 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.jsonreference-v0.19.5 
   777Relationship SPDXRef-Package-github.com.go-openapi.spec-v0.20.3 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.jsonpointer-v0.19.5 
   778Relationship SPDXRef-Package-github.com.go-openapi.spec-v0.20.3 DEPENDS_ON SPDXRef-Package-github.com.davecgh.go-spew-v1.1.1 
   779Relationship SPDXRef-Package-github.com.go-openapi.spec-v0.20.3 DEPENDS_ON SPDXRef-Package-github.com.PuerkitoBio.purell-v1.1.1 
   780Relationship SPDXRef-Package-github.com.go-openapi.spec-v0.20.3 DEPENDS_ON SPDXRef-Package-gopkg.in.yaml.v2-v2.4.0 
   781Relationship SPDXRef-Package-github.com.go-openapi.spec-v0.20.3 DEPENDS_ON SPDXRef-Package-golang.org.x.sys-v0.0.0-20210615035016-665e8c7367d1 
   782Relationship SPDXRef-Package-github.com.go-openapi.spec-v0.20.3 DEPENDS_ON SPDXRef-Package-github.com.PuerkitoBio.urlesc-v0.0.0-20170810143723-de5bf2ad4578 
   783Relationship SPDXRef-Package-github.com.go-openapi.spec-v0.20.3 DEPENDS_ON SPDXRef-Package-golang.org.x.crypto-v0.0.0-20210616213533-5ff15b29337e 
   784Relationship SPDXRef-Package-github.com.go-openapi.spec-v0.20.3 DEPENDS_ON SPDXRef-Package-golang.org.x.net-v0.0.0-20210525063256-abc453219eb5 
   785
   786##### Package representing the github.com/go-openapi/loads
   787
   788PackageName: github.com/go-openapi/loads
   789SPDXID: SPDXRef-Package-github.com.go-openapi.loads-v0.20.2
   790PackageVersion: v0.20.2
   791PackageSupplier: NOASSERTION
   792PackageDownloadLocation: NOASSERTION
   793FilesAnalyzed: false
   794PackageChecksum: SHA256: 93af64986aaf16f34f4a9fb02445573eda636219ecf4e5c03eece7d4b05a1231
   795PackageHomePage: https://github.com/go-openapi/loads
   796PackageLicenseConcluded: NOASSERTION
   797PackageLicenseDeclared: NOASSERTION
   798PackageCopyrightText: NOASSERTION
   799PackageLicenseComments: NOASSERTION
   800PackageComment: NOASSERTION
   801
   802Relationship SPDXRef-Package-github.com.go-openapi.loads-v0.20.2 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.jsonreference-v0.19.5 
   803Relationship SPDXRef-Package-github.com.go-openapi.loads-v0.20.2 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.strfmt-v0.20.1 
   804Relationship SPDXRef-Package-github.com.go-openapi.loads-v0.20.2 DEPENDS_ON SPDXRef-Package-golang.org.x.text-v0.3.6 
   805Relationship SPDXRef-Package-github.com.go-openapi.loads-v0.20.2 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.validate-v0.20.2 
   806Relationship SPDXRef-Package-github.com.go-openapi.loads-v0.20.2 DEPENDS_ON SPDXRef-Package-github.com.asaskevich.govalidator-v0.0.0-20210307081110-f21760c49a8d 
   807Relationship SPDXRef-Package-github.com.go-openapi.loads-v0.20.2 DEPENDS_ON SPDXRef-Package-github.com.davecgh.go-spew-v1.1.1 
   808Relationship SPDXRef-Package-github.com.go-openapi.loads-v0.20.2 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.errors-v0.20.0 
   809Relationship SPDXRef-Package-github.com.go-openapi.loads-v0.20.2 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.jsonpointer-v0.19.5 
   810Relationship SPDXRef-Package-github.com.go-openapi.loads-v0.20.2 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.spec-v0.20.3 
   811Relationship SPDXRef-Package-github.com.go-openapi.loads-v0.20.2 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.swag-v0.19.15 
   812Relationship SPDXRef-Package-github.com.go-openapi.loads-v0.20.2 DEPENDS_ON SPDXRef-Package-github.com.mitchellh.mapstructure-v1.4.1 
   813Relationship SPDXRef-Package-github.com.go-openapi.loads-v0.20.2 DEPENDS_ON SPDXRef-Package-gopkg.in.yaml.v2-v2.4.0 
   814Relationship SPDXRef-Package-github.com.go-openapi.loads-v0.20.2 DEPENDS_ON SPDXRef-Package-github.com.PuerkitoBio.purell-v1.1.1 
   815Relationship SPDXRef-Package-github.com.go-openapi.loads-v0.20.2 DEPENDS_ON SPDXRef-Package-go.mongodb.org.mongo-driver-v1.5.3 
   816Relationship SPDXRef-Package-github.com.go-openapi.loads-v0.20.2 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.analysis-v0.20.1 
   817Relationship SPDXRef-Package-github.com.go-openapi.loads-v0.20.2 DEPENDS_ON SPDXRef-Package-github.com.mailru.easyjson-v0.7.7 
   818Relationship SPDXRef-Package-github.com.go-openapi.loads-v0.20.2 DEPENDS_ON SPDXRef-Package-golang.org.x.net-v0.0.0-20210525063256-abc453219eb5 
   819Relationship SPDXRef-Package-github.com.go-openapi.loads-v0.20.2 DEPENDS_ON SPDXRef-Package-github.com.PuerkitoBio.urlesc-v0.0.0-20170810143723-de5bf2ad4578 
   820
   821##### Package representing the github.com/go-openapi/validate
   822
   823PackageName: github.com/go-openapi/validate
   824SPDXID: SPDXRef-Package-github.com.go-openapi.validate-v0.20.2
   825PackageVersion: v0.20.2
   826PackageSupplier: NOASSERTION
   827PackageDownloadLocation: NOASSERTION
   828FilesAnalyzed: false
   829PackageChecksum: SHA256: 57a89cb5a4af0a5df24c668749126006f2c0beb29e77d6915cdf54f07f1671b4
   830PackageHomePage: https://github.com/go-openapi/validate
   831PackageLicenseConcluded: NOASSERTION
   832PackageLicenseDeclared: NOASSERTION
   833PackageCopyrightText: NOASSERTION
   834PackageLicenseComments: NOASSERTION
   835PackageComment: NOASSERTION
   836
   837Relationship SPDXRef-Package-github.com.go-openapi.validate-v0.20.2 DEPENDS_ON SPDXRef-Package-github.com.asaskevich.govalidator-v0.0.0-20210307081110-f21760c49a8d 
   838Relationship SPDXRef-Package-github.com.go-openapi.validate-v0.20.2 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.runtime-v0.19.29 
   839Relationship SPDXRef-Package-github.com.go-openapi.validate-v0.20.2 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.strfmt-v0.20.1 
   840Relationship SPDXRef-Package-github.com.go-openapi.validate-v0.20.2 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.swag-v0.19.15 
   841Relationship SPDXRef-Package-github.com.go-openapi.validate-v0.20.2 DEPENDS_ON SPDXRef-Package-github.com.mitchellh.mapstructure-v1.4.1 
   842Relationship SPDXRef-Package-github.com.go-openapi.validate-v0.20.2 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.spec-v0.20.3 
   843Relationship SPDXRef-Package-github.com.go-openapi.validate-v0.20.2 DEPENDS_ON SPDXRef-Package-gopkg.in.yaml.v2-v2.4.0 
   844Relationship SPDXRef-Package-github.com.go-openapi.validate-v0.20.2 DEPENDS_ON SPDXRef-Package-go.mongodb.org.mongo-driver-v1.5.3 
   845Relationship SPDXRef-Package-github.com.go-openapi.validate-v0.20.2 DEPENDS_ON SPDXRef-Package-golang.org.x.net-v0.0.0-20210525063256-abc453219eb5 
   846Relationship SPDXRef-Package-github.com.go-openapi.validate-v0.20.2 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.analysis-v0.20.1 
   847Relationship SPDXRef-Package-github.com.go-openapi.validate-v0.20.2 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.errors-v0.20.0 
   848Relationship SPDXRef-Package-github.com.go-openapi.validate-v0.20.2 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.jsonpointer-v0.19.5 
   849Relationship SPDXRef-Package-github.com.go-openapi.validate-v0.20.2 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.loads-v0.20.2 
   850
   851##### Package representing the github.com/opentracing/opentracing-go
   852
   853PackageName: github.com/opentracing/opentracing-go
   854SPDXID: SPDXRef-Package-github.com.opentracing.opentracing-go-v1.2.0
   855PackageVersion: v1.2.0
   856PackageSupplier: NOASSERTION
   857PackageDownloadLocation: NOASSERTION
   858FilesAnalyzed: false
   859PackageChecksum: SHA256: dceb5ae504b6c9ad9d36469642fa86f586698d17cc5fd156f9019c688a6b246d
   860PackageHomePage: https://github.com/opentracing/opentracing-go
   861PackageLicenseConcluded: NOASSERTION
   862PackageLicenseDeclared: NOASSERTION
   863PackageCopyrightText: NOASSERTION
   864PackageLicenseComments: NOASSERTION
   865PackageComment: NOASSERTION
   866
   867##### Package representing the github.com/go-playground/locales
   868
   869PackageName: github.com/go-playground/locales
   870SPDXID: SPDXRef-Package-github.com.go-playground.locales-v0.13.0
   871PackageVersion: v0.13.0
   872PackageSupplier: NOASSERTION
   873PackageDownloadLocation: NOASSERTION
   874FilesAnalyzed: false
   875PackageChecksum: SHA256: 5d0fbcd46768d469dcb9c098b5332a765f0ba65aeb4d46837f3a58aadf2d5f7c
   876PackageHomePage: https://github.com/go-playground/locales
   877PackageLicenseConcluded: NOASSERTION
   878PackageLicenseDeclared: NOASSERTION
   879PackageCopyrightText: NOASSERTION
   880PackageLicenseComments: NOASSERTION
   881PackageComment: NOASSERTION
   882
   883Relationship SPDXRef-Package-github.com.go-playground.locales-v0.13.0 DEPENDS_ON SPDXRef-Package-golang.org.x.text-v0.3.6 
   884
   885##### Package representing the github.com/go-playground/universal-translator
   886
   887PackageName: github.com/go-playground/universal-translator
   888SPDXID: SPDXRef-Package-github.com.go-playground.universal-translator-v0.17.0
   889PackageVersion: v0.17.0
   890PackageSupplier: NOASSERTION
   891PackageDownloadLocation: NOASSERTION
   892FilesAnalyzed: false
   893PackageChecksum: SHA256: e4729059a54c41612abd564f297f8b81c23a652da796a100243904de0621e292
   894PackageHomePage: https://github.com/go-playground/universal-translator
   895PackageLicenseConcluded: NOASSERTION
   896PackageLicenseDeclared: NOASSERTION
   897PackageCopyrightText: NOASSERTION
   898PackageLicenseComments: NOASSERTION
   899PackageComment: NOASSERTION
   900
   901Relationship SPDXRef-Package-github.com.go-playground.universal-translator-v0.17.0 DEPENDS_ON SPDXRef-Package-github.com.go-playground.locales-v0.13.0 
   902
   903##### Package representing the github.com/leodido/go-urn
   904
   905PackageName: github.com/leodido/go-urn
   906SPDXID: SPDXRef-Package-github.com.leodido.go-urn-v1.2.1
   907PackageVersion: v1.2.1
   908PackageSupplier: NOASSERTION
   909PackageDownloadLocation: NOASSERTION
   910FilesAnalyzed: false
   911PackageChecksum: SHA256: 9ddea28cd322b11a0794bdbc9ef7c08e2e0a5756536c1e16dacfa5a2dacc1ed4
   912PackageHomePage: https://github.com/leodido/go-urn
   913PackageLicenseConcluded: NOASSERTION
   914PackageLicenseDeclared: NOASSERTION
   915PackageCopyrightText: NOASSERTION
   916PackageLicenseComments: NOASSERTION
   917PackageComment: NOASSERTION
   918
   919##### Package representing the github.com/go-playground/validator
   920
   921PackageName: github.com/go-playground/validator
   922SPDXID: SPDXRef-Package-github.com.go-playground.validator-v9.31.0+incompatible
   923PackageVersion: v9.31.0+incompatible
   924PackageSupplier: NOASSERTION
   925PackageDownloadLocation: NOASSERTION
   926FilesAnalyzed: false
   927PackageChecksum: SHA256: f408f3474f4e7fc4db8a260b696a4907cd03fecf1e216aca2304230e1514392d
   928PackageHomePage: https://github.com/go-playground/validator
   929PackageLicenseConcluded: NOASSERTION
   930PackageLicenseDeclared: NOASSERTION
   931PackageCopyrightText: NOASSERTION
   932PackageLicenseComments: NOASSERTION
   933PackageComment: NOASSERTION
   934
   935##### Package representing the github.com/mitchellh/go-homedir
   936
   937PackageName: github.com/mitchellh/go-homedir
   938SPDXID: SPDXRef-Package-github.com.mitchellh.go-homedir-v1.1.0
   939PackageVersion: v1.1.0
   940PackageSupplier: NOASSERTION
   941PackageDownloadLocation: NOASSERTION
   942FilesAnalyzed: false
   943PackageChecksum: SHA256: 756f9483a6678379c27563b85c209466b5b22c2006c88ece4ac5eb122edf05e7
   944PackageHomePage: https://github.com/mitchellh/go-homedir
   945PackageLicenseConcluded: NOASSERTION
   946PackageLicenseDeclared: NOASSERTION
   947PackageCopyrightText: NOASSERTION
   948PackageLicenseComments: NOASSERTION
   949PackageComment: NOASSERTION
   950
   951##### Package representing the github.com/spf13/pflag
   952
   953PackageName: github.com/spf13/pflag
   954SPDXID: SPDXRef-Package-github.com.spf13.pflag-v1.0.5
   955PackageVersion: v1.0.5
   956PackageSupplier: NOASSERTION
   957PackageDownloadLocation: NOASSERTION
   958FilesAnalyzed: false
   959PackageChecksum: SHA256: 1da4c58c01b8de4af39bf5292cf75da8788105be7316cf33bfb9083bd7cc0f68
   960PackageHomePage: https://github.com/spf13/pflag
   961PackageLicenseConcluded: NOASSERTION
   962PackageLicenseDeclared: NOASSERTION
   963PackageCopyrightText: NOASSERTION
   964PackageLicenseComments: NOASSERTION
   965PackageComment: NOASSERTION
   966
   967##### Package representing the github.com/spf13/cobra
   968
   969PackageName: github.com/spf13/cobra
   970SPDXID: SPDXRef-Package-github.com.spf13.cobra-v1.1.3
   971PackageVersion: v1.1.3
   972PackageSupplier: NOASSERTION
   973PackageDownloadLocation: NOASSERTION
   974FilesAnalyzed: false
   975PackageChecksum: SHA256: 13dae614a8a2f787f92a9e954ca6e630257bb651bd16bb47db56cd9307682759
   976PackageHomePage: https://github.com/spf13/cobra
   977PackageLicenseConcluded: NOASSERTION
   978PackageLicenseDeclared: NOASSERTION
   979PackageCopyrightText: NOASSERTION
   980PackageLicenseComments: NOASSERTION
   981PackageComment: NOASSERTION
   982
   983Relationship SPDXRef-Package-github.com.spf13.cobra-v1.1.3 DEPENDS_ON SPDXRef-Package-github.com.mitchellh.go-homedir-v1.1.0 
   984Relationship SPDXRef-Package-github.com.spf13.cobra-v1.1.3 DEPENDS_ON SPDXRef-Package-github.com.spf13.pflag-v1.0.5 
   985Relationship SPDXRef-Package-github.com.spf13.cobra-v1.1.3 DEPENDS_ON SPDXRef-Package-github.com.spf13.viper-v1.7.1 
   986Relationship SPDXRef-Package-github.com.spf13.cobra-v1.1.3 DEPENDS_ON SPDXRef-Package-gopkg.in.yaml.v2-v2.4.0 
   987
   988##### Package representing the golang.org/x/sys
   989
   990PackageName: golang.org/x/sys
   991SPDXID: SPDXRef-Package-golang.org.x.sys-v0.0.0-20210615035016-665e8c7367d1
   992PackageVersion: v0.0.0-20210615035016-665e8c7367d1
   993PackageSupplier: NOASSERTION
   994PackageDownloadLocation: NOASSERTION
   995FilesAnalyzed: false
   996PackageChecksum: SHA256: 094383cb925a141474b7d2dcff3d41acda43f0054ad69c3edf280dd185ddb14d
   997PackageHomePage: https://golang.org/x/sys
   998PackageLicenseConcluded: NOASSERTION
   999PackageLicenseDeclared: NOASSERTION
  1000PackageCopyrightText: NOASSERTION
  1001PackageLicenseComments: NOASSERTION
  1002PackageComment: NOASSERTION
  1003
  1004##### Package representing the github.com/fsnotify/fsnotify
  1005
  1006PackageName: github.com/fsnotify/fsnotify
  1007SPDXID: SPDXRef-Package-github.com.fsnotify.fsnotify-v1.4.9
  1008PackageVersion: v1.4.9
  1009PackageSupplier: NOASSERTION
  1010PackageDownloadLocation: NOASSERTION
  1011FilesAnalyzed: false
  1012PackageChecksum: SHA256: 5f5fc2b994c0deb384de9002d35c224d469876760f4380d19fda6831c69ee708
  1013PackageHomePage: https://github.com/fsnotify/fsnotify
  1014PackageLicenseConcluded: NOASSERTION
  1015PackageLicenseDeclared: NOASSERTION
  1016PackageCopyrightText: NOASSERTION
  1017PackageLicenseComments: NOASSERTION
  1018PackageComment: NOASSERTION
  1019
  1020Relationship SPDXRef-Package-github.com.fsnotify.fsnotify-v1.4.9 DEPENDS_ON SPDXRef-Package-golang.org.x.sys-v0.0.0-20210615035016-665e8c7367d1 
  1021
  1022##### Package representing the github.com/hashicorp/hcl
  1023
  1024PackageName: github.com/hashicorp/hcl
  1025SPDXID: SPDXRef-Package-github.com.hashicorp.hcl-v1.0.0
  1026PackageVersion: v1.0.0
  1027PackageSupplier: NOASSERTION
  1028PackageDownloadLocation: NOASSERTION
  1029FilesAnalyzed: false
  1030PackageChecksum: SHA256: 895bcea8d965251000f22fadd48cfafbe9540fd5d1bb53a412df05f4eb9ee209
  1031PackageHomePage: https://github.com/hashicorp/hcl
  1032PackageLicenseConcluded: NOASSERTION
  1033PackageLicenseDeclared: NOASSERTION
  1034PackageCopyrightText: NOASSERTION
  1035PackageLicenseComments: NOASSERTION
  1036PackageComment: NOASSERTION
  1037
  1038Relationship SPDXRef-Package-github.com.hashicorp.hcl-v1.0.0 DEPENDS_ON SPDXRef-Package-github.com.davecgh.go-spew-v1.1.1 
  1039
  1040##### Package representing the github.com/magiconair/properties
  1041
  1042PackageName: github.com/magiconair/properties
  1043SPDXID: SPDXRef-Package-github.com.magiconair.properties-v1.8.5
  1044PackageVersion: v1.8.5
  1045PackageSupplier: NOASSERTION
  1046PackageDownloadLocation: NOASSERTION
  1047FilesAnalyzed: false
  1048PackageChecksum: SHA256: 8279b773031b12daaff1682a11727d765b41ea7f8ba07d82f41c2151dabf50cf
  1049PackageHomePage: https://github.com/magiconair/properties
  1050PackageLicenseConcluded: NOASSERTION
  1051PackageLicenseDeclared: NOASSERTION
  1052PackageCopyrightText: NOASSERTION
  1053PackageLicenseComments: NOASSERTION
  1054PackageComment: NOASSERTION
  1055
  1056##### Package representing the github.com/pelletier/go-toml
  1057
  1058PackageName: github.com/pelletier/go-toml
  1059SPDXID: SPDXRef-Package-github.com.pelletier.go-toml-v1.9.3
  1060PackageVersion: v1.9.3
  1061PackageSupplier: NOASSERTION
  1062PackageDownloadLocation: NOASSERTION
  1063FilesAnalyzed: false
  1064PackageChecksum: SHA256: f21c71d15e543d7bf5ab0de02b01d438920f9cf8c82f6e0eea6ebf4e2f71dfca
  1065PackageHomePage: https://github.com/pelletier/go-toml
  1066PackageLicenseConcluded: NOASSERTION
  1067PackageLicenseDeclared: NOASSERTION
  1068PackageCopyrightText: NOASSERTION
  1069PackageLicenseComments: NOASSERTION
  1070PackageComment: NOASSERTION
  1071
  1072Relationship SPDXRef-Package-github.com.pelletier.go-toml-v1.9.3 DEPENDS_ON SPDXRef-Package-github.com.davecgh.go-spew-v1.1.1 
  1073Relationship SPDXRef-Package-github.com.pelletier.go-toml-v1.9.3 DEPENDS_ON SPDXRef-Package-gopkg.in.yaml.v2-v2.4.0 
  1074
  1075##### Package representing the github.com/spf13/afero
  1076
  1077PackageName: github.com/spf13/afero
  1078SPDXID: SPDXRef-Package-github.com.spf13.afero-v1.6.0
  1079PackageVersion: v1.6.0
  1080PackageSupplier: NOASSERTION
  1081PackageDownloadLocation: NOASSERTION
  1082FilesAnalyzed: false
  1083PackageChecksum: SHA256: 0ad525eccf932adf4198a0f145cf92b2ee2dde1f372115a082060411ebc02567
  1084PackageHomePage: https://github.com/spf13/afero
  1085PackageLicenseConcluded: NOASSERTION
  1086PackageLicenseDeclared: NOASSERTION
  1087PackageCopyrightText: NOASSERTION
  1088PackageLicenseComments: NOASSERTION
  1089PackageComment: NOASSERTION
  1090
  1091Relationship SPDXRef-Package-github.com.spf13.afero-v1.6.0 DEPENDS_ON SPDXRef-Package-golang.org.x.crypto-v0.0.0-20210616213533-5ff15b29337e 
  1092Relationship SPDXRef-Package-github.com.spf13.afero-v1.6.0 DEPENDS_ON SPDXRef-Package-golang.org.x.text-v0.3.6 
  1093
  1094##### Package representing the github.com/spf13/cast
  1095
  1096PackageName: github.com/spf13/cast
  1097SPDXID: SPDXRef-Package-github.com.spf13.cast-v1.3.1
  1098PackageVersion: v1.3.1
  1099PackageSupplier: NOASSERTION
  1100PackageDownloadLocation: NOASSERTION
  1101FilesAnalyzed: false
  1102PackageChecksum: SHA256: 62b31a6b804bd52025bc90c20ebfb9330cc7d6d763fbdc4275daf18351526921
  1103PackageHomePage: https://github.com/spf13/cast
  1104PackageLicenseConcluded: NOASSERTION
  1105PackageLicenseDeclared: NOASSERTION
  1106PackageCopyrightText: NOASSERTION
  1107PackageLicenseComments: NOASSERTION
  1108PackageComment: NOASSERTION
  1109
  1110Relationship SPDXRef-Package-github.com.spf13.cast-v1.3.1 DEPENDS_ON SPDXRef-Package-github.com.davecgh.go-spew-v1.1.1 
  1111
  1112##### Package representing the github.com/spf13/jwalterweatherman
  1113
  1114PackageName: github.com/spf13/jwalterweatherman
  1115SPDXID: SPDXRef-Package-github.com.spf13.jwalterweatherman-v1.1.0
  1116PackageVersion: v1.1.0
  1117PackageSupplier: NOASSERTION
  1118PackageDownloadLocation: NOASSERTION
  1119FilesAnalyzed: false
  1120PackageChecksum: SHA256: 3a1bde328c7d9a65571ab45c07aedcc3a5ef9259fba27695e8b9b1e74332fd2b
  1121PackageHomePage: https://github.com/spf13/jwalterweatherman
  1122PackageLicenseConcluded: NOASSERTION
  1123PackageLicenseDeclared: NOASSERTION
  1124PackageCopyrightText: NOASSERTION
  1125PackageLicenseComments: NOASSERTION
  1126PackageComment: NOASSERTION
  1127
  1128Relationship SPDXRef-Package-github.com.spf13.jwalterweatherman-v1.1.0 DEPENDS_ON SPDXRef-Package-github.com.davecgh.go-spew-v1.1.1 
  1129
  1130##### Package representing the github.com/subosito/gotenv
  1131
  1132PackageName: github.com/subosito/gotenv
  1133SPDXID: SPDXRef-Package-github.com.subosito.gotenv-v1.2.0
  1134PackageVersion: v1.2.0
  1135PackageSupplier: NOASSERTION
  1136PackageDownloadLocation: NOASSERTION
  1137FilesAnalyzed: false
  1138PackageChecksum: SHA256: 100a4810859d117550e36abab7faacf5469ec9a5063af11c2eaf515e4788250f
  1139PackageHomePage: https://github.com/subosito/gotenv
  1140PackageLicenseConcluded: NOASSERTION
  1141PackageLicenseDeclared: NOASSERTION
  1142PackageCopyrightText: NOASSERTION
  1143PackageLicenseComments: NOASSERTION
  1144PackageComment: NOASSERTION
  1145
  1146##### Package representing the gopkg.in/ini.v1
  1147
  1148PackageName: gopkg.in/ini.v1
  1149SPDXID: SPDXRef-Package-gopkg.in.ini.v1-v1.62.0
  1150PackageVersion: v1.62.0
  1151PackageSupplier: NOASSERTION
  1152PackageDownloadLocation: NOASSERTION
  1153FilesAnalyzed: false
  1154PackageChecksum: SHA256: cc6da295ac6329f0763b4d19e87016b801b044bf966e77dbe27bea5b7923d6d7
  1155PackageHomePage: https://gopkg.in/ini.v1
  1156PackageLicenseConcluded: NOASSERTION
  1157PackageLicenseDeclared: NOASSERTION
  1158PackageCopyrightText: NOASSERTION
  1159PackageLicenseComments: NOASSERTION
  1160PackageComment: NOASSERTION
  1161
  1162##### Package representing the github.com/spf13/viper
  1163
  1164PackageName: github.com/spf13/viper
  1165SPDXID: SPDXRef-Package-github.com.spf13.viper-v1.7.1
  1166PackageVersion: v1.7.1
  1167PackageSupplier: NOASSERTION
  1168PackageDownloadLocation: NOASSERTION
  1169FilesAnalyzed: false
  1170PackageChecksum: SHA256: 46ff1c376bdd16a5b299764c028eceeb618852e1e0b08e50d000e54e12000410
  1171PackageHomePage: https://github.com/spf13/viper
  1172PackageLicenseConcluded: NOASSERTION
  1173PackageLicenseDeclared: NOASSERTION
  1174PackageCopyrightText: NOASSERTION
  1175PackageLicenseComments: NOASSERTION
  1176PackageComment: NOASSERTION
  1177
  1178Relationship SPDXRef-Package-github.com.spf13.viper-v1.7.1 DEPENDS_ON SPDXRef-Package-golang.org.x.sys-v0.0.0-20210615035016-665e8c7367d1 
  1179Relationship SPDXRef-Package-github.com.spf13.viper-v1.7.1 DEPENDS_ON SPDXRef-Package-golang.org.x.text-v0.3.6 
  1180Relationship SPDXRef-Package-github.com.spf13.viper-v1.7.1 DEPENDS_ON SPDXRef-Package-github.com.golang.groupcache-v0.0.0-20210331224755-41bb18bfe9da 
  1181Relationship SPDXRef-Package-github.com.spf13.viper-v1.7.1 DEPENDS_ON SPDXRef-Package-github.com.spf13.cast-v1.3.1 
  1182Relationship SPDXRef-Package-github.com.spf13.viper-v1.7.1 DEPENDS_ON SPDXRef-Package-github.com.subosito.gotenv-v1.2.0 
  1183Relationship SPDXRef-Package-github.com.spf13.viper-v1.7.1 DEPENDS_ON SPDXRef-Package-go.uber.org.atomic-v1.7.0 
  1184Relationship SPDXRef-Package-github.com.spf13.viper-v1.7.1 DEPENDS_ON SPDXRef-Package-github.com.spf13.jwalterweatherman-v1.1.0 
  1185Relationship SPDXRef-Package-github.com.spf13.viper-v1.7.1 DEPENDS_ON SPDXRef-Package-golang.org.x.time-v0.0.0-20210220033141-f8bda1e9f3ba 
  1186Relationship SPDXRef-Package-github.com.spf13.viper-v1.7.1 DEPENDS_ON SPDXRef-Package-golang.org.x.crypto-v0.0.0-20210616213533-5ff15b29337e 
  1187Relationship SPDXRef-Package-github.com.spf13.viper-v1.7.1 DEPENDS_ON SPDXRef-Package-github.com.fsnotify.fsnotify-v1.4.9 
  1188Relationship SPDXRef-Package-github.com.spf13.viper-v1.7.1 DEPENDS_ON SPDXRef-Package-github.com.gogo.protobuf-v1.3.2 
  1189Relationship SPDXRef-Package-github.com.spf13.viper-v1.7.1 DEPENDS_ON SPDXRef-Package-github.com.prometheus.client-golang-v1.11.0 
  1190Relationship SPDXRef-Package-github.com.spf13.viper-v1.7.1 DEPENDS_ON SPDXRef-Package-github.com.spf13.afero-v1.6.0 
  1191Relationship SPDXRef-Package-github.com.spf13.viper-v1.7.1 DEPENDS_ON SPDXRef-Package-github.com.magiconair.properties-v1.8.5 
  1192Relationship SPDXRef-Package-github.com.spf13.viper-v1.7.1 DEPENDS_ON SPDXRef-Package-gopkg.in.ini.v1-v1.62.0 
  1193Relationship SPDXRef-Package-github.com.spf13.viper-v1.7.1 DEPENDS_ON SPDXRef-Package-golang.org.x.net-v0.0.0-20210525063256-abc453219eb5 
  1194Relationship SPDXRef-Package-github.com.spf13.viper-v1.7.1 DEPENDS_ON SPDXRef-Package-google.golang.org.grpc-v1.38.0 
  1195Relationship SPDXRef-Package-github.com.spf13.viper-v1.7.1 DEPENDS_ON SPDXRef-Package-go.uber.org.multierr-v1.7.0 
  1196Relationship SPDXRef-Package-github.com.spf13.viper-v1.7.1 DEPENDS_ON SPDXRef-Package-go.uber.org.zap-v1.16.0 
  1197Relationship SPDXRef-Package-github.com.spf13.viper-v1.7.1 DEPENDS_ON SPDXRef-Package-gopkg.in.yaml.v2-v2.4.0 
  1198Relationship SPDXRef-Package-github.com.spf13.viper-v1.7.1 DEPENDS_ON SPDXRef-Package-github.com.hashicorp.hcl-v1.0.0 
  1199Relationship SPDXRef-Package-github.com.spf13.viper-v1.7.1 DEPENDS_ON SPDXRef-Package-github.com.mitchellh.mapstructure-v1.4.1 
  1200Relationship SPDXRef-Package-github.com.spf13.viper-v1.7.1 DEPENDS_ON SPDXRef-Package-github.com.pelletier.go-toml-v1.9.3 
  1201Relationship SPDXRef-Package-github.com.spf13.viper-v1.7.1 DEPENDS_ON SPDXRef-Package-github.com.spf13.pflag-v1.0.5 
  1202
  1203##### Package representing the github.com/sigstore/rekor
  1204
  1205PackageName: github.com/sigstore/rekor
  1206SPDXID: SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6
  1207PackageVersion: v0.1.2-0.20210519014330-b5480728bde6
  1208PackageSupplier: NOASSERTION
  1209PackageDownloadLocation: NOASSERTION
  1210FilesAnalyzed: false
  1211PackageChecksum: SHA256: 80f722ace48bbeb352bdf56fc02058f966d5cf924243194631b322f93a0208df
  1212PackageHomePage: https://github.com/sigstore/rekor
  1213PackageLicenseConcluded: NOASSERTION
  1214PackageLicenseDeclared: NOASSERTION
  1215PackageCopyrightText: NOASSERTION
  1216PackageLicenseComments: NOASSERTION
  1217PackageComment: NOASSERTION
  1218
  1219Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-github.com.blang.semver-v3.5.1+incompatible 
  1220Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-github.com.cavaliercoder.go-rpm-v0.0.0-20200122174316-8cb9fd9c31a8 
  1221Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.loads-v0.20.2 
  1222Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-github.com.howeyc.gopass-v0.0.0-20190910152052-7cb4b85ec19c 
  1223Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-github.com.spf13.afero-v1.6.0 
  1224Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-github.com.spf13.cast-v1.3.1 
  1225Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-github.com.go-chi.chi-v4.1.2+incompatible 
  1226Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-github.com.mitchellh.mapstructure-v1.4.1 
  1227Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-golang.org.x.crypto-v0.0.0-20210616213533-5ff15b29337e 
  1228Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-github.com.mailru.easyjson-v0.7.7 
  1229Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-google.golang.org.protobuf-v1.26.0 
  1230Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-github.com.google.certificate-transparency-go-v1.1.1 
  1231Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-github.com.ghodss.yaml-v1.0.0 
  1232Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.spec-v0.20.3 
  1233Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.strfmt-v0.20.1 
  1234Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-github.com.go-playground.validator-v9.31.0+incompatible 
  1235Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-go.uber.org.zap-v1.16.0 
  1236Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-golang.org.x.sync-v0.0.0-20210220032951-036812b2e83c 
  1237Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-github.com.magiconair.properties-v1.8.5 
  1238Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-github.com.spf13.jwalterweatherman-v1.1.0 
  1239Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.swag-v0.19.15 
  1240Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.validate-v0.20.2 
  1241Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-github.com.pelletier.go-toml-v1.9.3 
  1242Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-golang.org.x.sys-v0.0.0-20210615035016-665e8c7367d1 
  1243Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-gopkg.in.ini.v1-v1.62.0 
  1244Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-github.com.asaskevich.govalidator-v0.0.0-20210307081110-f21760c49a8d 
  1245Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-github.com.jedisct1.go-minisign-v0.0.0-20210414164026-819d7e2534ac 
  1246Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-github.com.spf13.pflag-v1.0.5 
  1247Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-github.com.zalando.go-keyring-v0.1.1 
  1248Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-golang.org.x.term-v0.0.0-20210615171337-6886f2dfbf5b 
  1249Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-github.com.golang.protobuf-v1.5.2 
  1250Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-github.com.cyberphone.json-canonicalization-v0.0.0-20210303052042-6bc126869bf4 
  1251Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-github.com.google.trillian-v1.3.14-0.20210413093047-5e12fb368c8f 
  1252Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-github.com.prometheus.client-golang-v1.11.0 
  1253Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-golang.org.x.net-v0.0.0-20210525063256-abc453219eb5 
  1254Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.errors-v0.20.0 
  1255Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-github.com.pkg.errors-v0.9.1 
  1256Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-github.com.sigstore.sigstore-v0.0.0-20210609084117-386ea718fc64 
  1257Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-github.com.spf13.viper-v1.7.1 
  1258Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-google.golang.org.genproto-v0.0.0-20210617175327-b9e0b3197ced 
  1259Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-github.com.go-openapi.runtime-v0.19.29 
  1260Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-github.com.mitchellh.go-homedir-v1.1.0 
  1261Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-github.com.sassoftware.relic-v7.2.1+incompatible 
  1262Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-github.com.spf13.cobra-v1.1.3 
  1263Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-google.golang.org.grpc-v1.38.0 
  1264Relationship SPDXRef-Package-github.com.sigstore.rekor-v0.1.2-0.20210519014330-b5480728bde6 DEPENDS_ON SPDXRef-Package-github.com.fsnotify.fsnotify-v1.4.9 
  1265
  1266##### Package representing the github.com/google/certificate-transparency-go
  1267
  1268PackageName: github.com/google/certificate-transparency-go
  1269SPDXID: SPDXRef-Package-github.com.google.certificate-transparency-go-v1.1.1
  1270PackageVersion: v1.1.1
  1271PackageSupplier: NOASSERTION
  1272PackageDownloadLocation: NOASSERTION
  1273FilesAnalyzed: false
  1274PackageChecksum: SHA256: 095ae65cdc8f710c01a841546db2d13d47decc49a7270c94e86351ef3a0cad8f
  1275PackageHomePage: https://github.com/google/certificate-transparency-go
  1276PackageLicenseConcluded: NOASSERTION
  1277PackageLicenseDeclared: NOASSERTION
  1278PackageCopyrightText: NOASSERTION
  1279PackageLicenseComments: NOASSERTION
  1280PackageComment: NOASSERTION
  1281
  1282Relationship SPDXRef-Package-github.com.google.certificate-transparency-go-v1.1.1 DEPENDS_ON SPDXRef-Package-google.golang.org.protobuf-v1.26.0 
  1283Relationship SPDXRef-Package-github.com.google.certificate-transparency-go-v1.1.1 DEPENDS_ON SPDXRef-Package-github.com.golang.groupcache-v0.0.0-20210331224755-41bb18bfe9da 
  1284Relationship SPDXRef-Package-github.com.google.certificate-transparency-go-v1.1.1 DEPENDS_ON SPDXRef-Package-github.com.google.trillian-v1.3.14-0.20210413093047-5e12fb368c8f 
  1285Relationship SPDXRef-Package-github.com.google.certificate-transparency-go-v1.1.1 DEPENDS_ON SPDXRef-Package-github.com.spf13.cobra-v1.1.3 
  1286Relationship SPDXRef-Package-github.com.google.certificate-transparency-go-v1.1.1 DEPENDS_ON SPDXRef-Package-google.golang.org.api-v0.46.0 
  1287Relationship SPDXRef-Package-github.com.google.certificate-transparency-go-v1.1.1 DEPENDS_ON SPDXRef-Package-google.golang.org.grpc-v1.38.0 
  1288Relationship SPDXRef-Package-github.com.google.certificate-transparency-go-v1.1.1 DEPENDS_ON SPDXRef-Package-github.com.mattn.go-runewidth-v0.0.9 
  1289Relationship SPDXRef-Package-github.com.google.certificate-transparency-go-v1.1.1 DEPENDS_ON SPDXRef-Package-go.uber.org.multierr-v1.7.0 
  1290Relationship SPDXRef-Package-github.com.google.certificate-transparency-go-v1.1.1 DEPENDS_ON SPDXRef-Package-go.uber.org.zap-v1.16.0 
  1291Relationship SPDXRef-Package-github.com.google.certificate-transparency-go-v1.1.1 DEPENDS_ON SPDXRef-Package-golang.org.x.net-v0.0.0-20210525063256-abc453219eb5 
  1292Relationship SPDXRef-Package-github.com.google.certificate-transparency-go-v1.1.1 DEPENDS_ON SPDXRef-Package-github.com.golang.protobuf-v1.5.2 
  1293Relationship SPDXRef-Package-github.com.google.certificate-transparency-go-v1.1.1 DEPENDS_ON SPDXRef-Package-github.com.google.go-cmp-v0.5.6 
  1294Relationship SPDXRef-Package-github.com.google.certificate-transparency-go-v1.1.1 DEPENDS_ON SPDXRef-Package-google.golang.org.genproto-v0.0.0-20210617175327-b9e0b3197ced 
  1295Relationship SPDXRef-Package-github.com.google.certificate-transparency-go-v1.1.1 DEPENDS_ON SPDXRef-Package-github.com.olekukonko.tablewriter-v0.0.5 
  1296Relationship SPDXRef-Package-github.com.google.certificate-transparency-go-v1.1.1 DEPENDS_ON SPDXRef-Package-github.com.prometheus.client-golang-v1.11.0 
  1297Relationship SPDXRef-Package-github.com.google.certificate-transparency-go-v1.1.1 DEPENDS_ON SPDXRef-Package-go.uber.org.atomic-v1.7.0 
  1298Relationship SPDXRef-Package-github.com.google.certificate-transparency-go-v1.1.1 DEPENDS_ON SPDXRef-Package-golang.org.x.crypto-v0.0.0-20210616213533-5ff15b29337e 
  1299
  1300##### Package representing the google.golang.org/protobuf
  1301
  1302PackageName: google.golang.org/protobuf
  1303SPDXID: SPDXRef-Package-google.golang.org.protobuf-v1.26.0
  1304PackageVersion: v1.26.0
  1305PackageSupplier: NOASSERTION
  1306PackageDownloadLocation: NOASSERTION
  1307FilesAnalyzed: false
  1308PackageChecksum: SHA256: 121dc87761410a8622800b896b6f77b5b8ce26bd2484bcf85c8d6fd177116df1
  1309PackageHomePage: https://google.golang.org/protobuf
  1310PackageLicenseConcluded: NOASSERTION
  1311PackageLicenseDeclared: NOASSERTION
  1312PackageCopyrightText: NOASSERTION
  1313PackageLicenseComments: NOASSERTION
  1314PackageComment: NOASSERTION
  1315
  1316Relationship SPDXRef-Package-google.golang.org.protobuf-v1.26.0 DEPENDS_ON SPDXRef-Package-github.com.golang.protobuf-v1.5.2 
  1317Relationship SPDXRef-Package-google.golang.org.protobuf-v1.26.0 DEPENDS_ON SPDXRef-Package-github.com.google.go-cmp-v0.5.6 
  1318Relationship SPDXRef-Package-google.golang.org.protobuf-v1.26.0 DEPENDS_ON SPDXRef-Package-google.golang.org.genproto-v0.0.0-20210617175327-b9e0b3197ced 
  1319
  1320##### Package representing the github.com/golang/protobuf
  1321
  1322PackageName: github.com/golang/protobuf
  1323SPDXID: SPDXRef-Package-github.com.golang.protobuf-v1.5.2
  1324PackageVersion: v1.5.2
  1325PackageSupplier: NOASSERTION
  1326PackageDownloadLocation: NOASSERTION
  1327FilesAnalyzed: false
  1328PackageChecksum: SHA256: 6f2a16bbef47f86415aa7ab887df08d30c1d4e79917c370fe163dbf5b8bde6b8
  1329PackageHomePage: https://github.com/golang/protobuf
  1330PackageLicenseConcluded: NOASSERTION
  1331PackageLicenseDeclared: NOASSERTION
  1332PackageCopyrightText: NOASSERTION
  1333PackageLicenseComments: NOASSERTION
  1334PackageComment: NOASSERTION
  1335
  1336Relationship SPDXRef-Package-github.com.golang.protobuf-v1.5.2 DEPENDS_ON SPDXRef-Package-github.com.google.go-cmp-v0.5.6 
  1337Relationship SPDXRef-Package-github.com.golang.protobuf-v1.5.2 DEPENDS_ON SPDXRef-Package-google.golang.org.protobuf-v1.26.0 
  1338
  1339##### Package representing the google.golang.org/genproto
  1340
  1341PackageName: google.golang.org/genproto
  1342SPDXID: SPDXRef-Package-google.golang.org.genproto-v0.0.0-20210617175327-b9e0b3197ced
  1343PackageVersion: v0.0.0-20210617175327-b9e0b3197ced
  1344PackageSupplier: NOASSERTION
  1345PackageDownloadLocation: NOASSERTION
  1346FilesAnalyzed: false
  1347PackageChecksum: SHA256: fb5b2471725d8be3b0a0d39775d6379681c484e5320f1c28007c425e0dccda4c
  1348PackageHomePage: https://google.golang.org/genproto
  1349PackageLicenseConcluded: NOASSERTION
  1350PackageLicenseDeclared: NOASSERTION
  1351PackageCopyrightText: NOASSERTION
  1352PackageLicenseComments: NOASSERTION
  1353PackageComment: NOASSERTION
  1354
  1355Relationship SPDXRef-Package-google.golang.org.genproto-v0.0.0-20210617175327-b9e0b3197ced DEPENDS_ON SPDXRef-Package-google.golang.org.protobuf-v1.26.0 
  1356Relationship SPDXRef-Package-google.golang.org.genproto-v0.0.0-20210617175327-b9e0b3197ced DEPENDS_ON SPDXRef-Package-golang.org.x.sync-v0.0.0-20210220032951-036812b2e83c 
  1357Relationship SPDXRef-Package-google.golang.org.genproto-v0.0.0-20210617175327-b9e0b3197ced DEPENDS_ON SPDXRef-Package-github.com.golang.protobuf-v1.5.2 
  1358Relationship SPDXRef-Package-google.golang.org.genproto-v0.0.0-20210617175327-b9e0b3197ced DEPENDS_ON SPDXRef-Package-golang.org.x.net-v0.0.0-20210525063256-abc453219eb5 
  1359Relationship SPDXRef-Package-google.golang.org.genproto-v0.0.0-20210617175327-b9e0b3197ced DEPENDS_ON SPDXRef-Package-golang.org.x.sys-v0.0.0-20210615035016-665e8c7367d1 
  1360Relationship SPDXRef-Package-google.golang.org.genproto-v0.0.0-20210617175327-b9e0b3197ced DEPENDS_ON SPDXRef-Package-golang.org.x.text-v0.3.6 
  1361Relationship SPDXRef-Package-google.golang.org.genproto-v0.0.0-20210617175327-b9e0b3197ced DEPENDS_ON SPDXRef-Package-google.golang.org.grpc-v1.38.0 
  1362
  1363##### Package representing the google.golang.org/grpc
  1364
  1365PackageName: google.golang.org/grpc
  1366SPDXID: SPDXRef-Package-google.golang.org.grpc-v1.38.0
  1367PackageVersion: v1.38.0
  1368PackageSupplier: NOASSERTION
  1369PackageDownloadLocation: NOASSERTION
  1370FilesAnalyzed: false
  1371PackageChecksum: SHA256: 28897ebd9d678ee15f24ce7808810c9c1ae39317687b00a4bb5555ae1627ee8d
  1372PackageHomePage: https://google.golang.org/grpc
  1373PackageLicenseConcluded: NOASSERTION
  1374PackageLicenseDeclared: NOASSERTION
  1375PackageCopyrightText: NOASSERTION
  1376PackageLicenseComments: NOASSERTION
  1377PackageComment: NOASSERTION
  1378
  1379Relationship SPDXRef-Package-google.golang.org.grpc-v1.38.0 DEPENDS_ON SPDXRef-Package-golang.org.x.sys-v0.0.0-20210615035016-665e8c7367d1 
  1380Relationship SPDXRef-Package-google.golang.org.grpc-v1.38.0 DEPENDS_ON SPDXRef-Package-google.golang.org.protobuf-v1.26.0 
  1381Relationship SPDXRef-Package-google.golang.org.grpc-v1.38.0 DEPENDS_ON SPDXRef-Package-cloud.google.com.go-v0.81.0 
  1382Relationship SPDXRef-Package-google.golang.org.grpc-v1.38.0 DEPENDS_ON SPDXRef-Package-golang.org.x.text-v0.3.6 
  1383Relationship SPDXRef-Package-google.golang.org.grpc-v1.38.0 DEPENDS_ON SPDXRef-Package-golang.org.x.oauth2-v0.0.0-20210514164344-f6687ab2804c 
  1384Relationship SPDXRef-Package-google.golang.org.grpc-v1.38.0 DEPENDS_ON SPDXRef-Package-github.com.google.go-cmp-v0.5.6 
  1385Relationship SPDXRef-Package-google.golang.org.grpc-v1.38.0 DEPENDS_ON SPDXRef-Package-golang.org.x.net-v0.0.0-20210525063256-abc453219eb5 
  1386Relationship SPDXRef-Package-google.golang.org.grpc-v1.38.0 DEPENDS_ON SPDXRef-Package-google.golang.org.genproto-v0.0.0-20210617175327-b9e0b3197ced 
  1387Relationship SPDXRef-Package-google.golang.org.grpc-v1.38.0 DEPENDS_ON SPDXRef-Package-golang.org.x.sync-v0.0.0-20210220032951-036812b2e83c 
  1388Relationship SPDXRef-Package-google.golang.org.grpc-v1.38.0 DEPENDS_ON SPDXRef-Package-github.com.gogo.protobuf-v1.3.2 
  1389Relationship SPDXRef-Package-google.golang.org.grpc-v1.38.0 DEPENDS_ON SPDXRef-Package-github.com.golang.protobuf-v1.5.2 
  1390
  1391##### Package representing the github.com/go-chi/chi
  1392
  1393PackageName: github.com/go-chi/chi
  1394SPDXID: SPDXRef-Package-github.com.go-chi.chi-v4.1.2+incompatible
  1395PackageVersion: v4.1.2+incompatible
  1396PackageSupplier: NOASSERTION
  1397PackageDownloadLocation: NOASSERTION
  1398FilesAnalyzed: false
  1399PackageChecksum: SHA256: 6c946a8dec9d21da32b4210fa7978a5cb94dfc2b1fb036486163d2da9c089ff9
  1400PackageHomePage: https://github.com/go-chi/chi
  1401PackageLicenseConcluded: NOASSERTION
  1402PackageLicenseDeclared: NOASSERTION
  1403PackageCopyrightText: NOASSERTION
  1404PackageLicenseComments: NOASSERTION
  1405PackageComment: NOASSERTION
  1406
  1407##### Package representing the go.uber.org/atomic
  1408
  1409PackageName: go.uber.org/atomic
  1410SPDXID: SPDXRef-Package-go.uber.org.atomic-v1.7.0
  1411PackageVersion: v1.7.0
  1412PackageSupplier: NOASSERTION
  1413PackageDownloadLocation: NOASSERTION
  1414FilesAnalyzed: false
  1415PackageChecksum: SHA256: 82f23ad2d95732cc976adb89249921f6115a4dd137b10fd3032b1bd71474c7f5
  1416PackageHomePage: https://go.uber.org/atomic
  1417PackageLicenseConcluded: NOASSERTION
  1418PackageLicenseDeclared: NOASSERTION
  1419PackageCopyrightText: NOASSERTION
  1420PackageLicenseComments: NOASSERTION
  1421PackageComment: NOASSERTION
  1422
  1423Relationship SPDXRef-Package-go.uber.org.atomic-v1.7.0 DEPENDS_ON SPDXRef-Package-github.com.davecgh.go-spew-v1.1.1 
  1424
  1425##### Package representing the go.uber.org/multierr
  1426
  1427PackageName: go.uber.org/multierr
  1428SPDXID: SPDXRef-Package-go.uber.org.multierr-v1.7.0
  1429PackageVersion: v1.7.0
  1430PackageSupplier: NOASSERTION
  1431PackageDownloadLocation: NOASSERTION
  1432FilesAnalyzed: false
  1433PackageChecksum: SHA256: 4bb6aa0b6cfb40ba982ee2226c46e4c582181690d25a68e8656b44e5013caeca
  1434PackageHomePage: https://go.uber.org/multierr
  1435PackageLicenseConcluded: NOASSERTION
  1436PackageLicenseDeclared: NOASSERTION
  1437PackageCopyrightText: NOASSERTION
  1438PackageLicenseComments: NOASSERTION
  1439PackageComment: NOASSERTION
  1440
  1441Relationship SPDXRef-Package-go.uber.org.multierr-v1.7.0 DEPENDS_ON SPDXRef-Package-go.uber.org.atomic-v1.7.0 
  1442
  1443##### Package representing the go.uber.org/zap
  1444
  1445PackageName: go.uber.org/zap
  1446SPDXID: SPDXRef-Package-go.uber.org.zap-v1.16.0
  1447PackageVersion: v1.16.0
  1448PackageSupplier: NOASSERTION
  1449PackageDownloadLocation: NOASSERTION
  1450FilesAnalyzed: false
  1451PackageChecksum: SHA256: cfd512fe5f2bc6c885d192cbe1db866a46527acce9adebaf598e8928418b9c08
  1452PackageHomePage: https://go.uber.org/zap
  1453PackageLicenseConcluded: NOASSERTION
  1454PackageLicenseDeclared: NOASSERTION
  1455PackageCopyrightText: NOASSERTION
  1456PackageLicenseComments: NOASSERTION
  1457PackageComment: NOASSERTION
  1458
  1459Relationship SPDXRef-Package-go.uber.org.zap-v1.16.0 DEPENDS_ON SPDXRef-Package-go.uber.org.multierr-v1.7.0 
  1460Relationship SPDXRef-Package-go.uber.org.zap-v1.16.0 DEPENDS_ON SPDXRef-Package-gopkg.in.yaml.v2-v2.4.0 
  1461Relationship SPDXRef-Package-go.uber.org.zap-v1.16.0 DEPENDS_ON SPDXRef-Package-github.com.pkg.errors-v0.9.1 
  1462Relationship SPDXRef-Package-go.uber.org.zap-v1.16.0 DEPENDS_ON SPDXRef-Package-go.uber.org.atomic-v1.7.0 
  1463
  1464##### Package representing the github.com/blang/semver
  1465
  1466PackageName: github.com/blang/semver
  1467SPDXID: SPDXRef-Package-github.com.blang.semver-v3.5.1+incompatible
  1468PackageVersion: v3.5.1+incompatible
  1469PackageSupplier: NOASSERTION
  1470PackageDownloadLocation: NOASSERTION
  1471FilesAnalyzed: false
  1472PackageChecksum: SHA256: 668ac29febf2c8c7e99d84eb10030d39ca9042980df35475ef75ea1b5145d258
  1473PackageHomePage: https://github.com/blang/semver
  1474PackageLicenseConcluded: NOASSERTION
  1475PackageLicenseDeclared: NOASSERTION
  1476PackageCopyrightText: NOASSERTION
  1477PackageLicenseComments: NOASSERTION
  1478PackageComment: NOASSERTION
  1479
  1480##### Package representing the golang.org/x/term
  1481
  1482PackageName: golang.org/x/term
  1483SPDXID: SPDXRef-Package-golang.org.x.term-v0.0.0-20210615171337-6886f2dfbf5b
  1484PackageVersion: v0.0.0-20210615171337-6886f2dfbf5b
  1485PackageSupplier: NOASSERTION
  1486PackageDownloadLocation: NOASSERTION
  1487FilesAnalyzed: false
  1488PackageChecksum: SHA256: 8ee37192f7d4533352609092a0ce86b686643bae42cb6eb70eeaa09b46a50666
  1489PackageHomePage: https://golang.org/x/term
  1490PackageLicenseConcluded: NOASSERTION
  1491PackageLicenseDeclared: NOASSERTION
  1492PackageCopyrightText: NOASSERTION
  1493PackageLicenseComments: NOASSERTION
  1494PackageComment: NOASSERTION
  1495
  1496Relationship SPDXRef-Package-golang.org.x.term-v0.0.0-20210615171337-6886f2dfbf5b DEPENDS_ON SPDXRef-Package-golang.org.x.sys-v0.0.0-20210615035016-665e8c7367d1 
  1497
  1498##### Package representing the golang.org/x/crypto
  1499
  1500PackageName: golang.org/x/crypto
  1501SPDXID: SPDXRef-Package-golang.org.x.crypto-v0.0.0-20210616213533-5ff15b29337e
  1502PackageVersion: v0.0.0-20210616213533-5ff15b29337e
  1503PackageSupplier: NOASSERTION
  1504PackageDownloadLocation: NOASSERTION
  1505FilesAnalyzed: false
  1506PackageChecksum: SHA256: 711b1960550951ba9f896f4a6cf9b9277385e2acc66930be13a94323edd1c81f
  1507PackageHomePage: https://golang.org/x/crypto
  1508PackageLicenseConcluded: NOASSERTION
  1509PackageLicenseDeclared: NOASSERTION
  1510PackageCopyrightText: NOASSERTION
  1511PackageLicenseComments: NOASSERTION
  1512PackageComment: NOASSERTION
  1513
  1514Relationship SPDXRef-Package-golang.org.x.crypto-v0.0.0-20210616213533-5ff15b29337e DEPENDS_ON SPDXRef-Package-golang.org.x.net-v0.0.0-20210525063256-abc453219eb5 
  1515Relationship SPDXRef-Package-golang.org.x.crypto-v0.0.0-20210616213533-5ff15b29337e DEPENDS_ON SPDXRef-Package-golang.org.x.sys-v0.0.0-20210615035016-665e8c7367d1 
  1516Relationship SPDXRef-Package-golang.org.x.crypto-v0.0.0-20210616213533-5ff15b29337e DEPENDS_ON SPDXRef-Package-golang.org.x.term-v0.0.0-20210615171337-6886f2dfbf5b 
  1517Relationship SPDXRef-Package-golang.org.x.crypto-v0.0.0-20210616213533-5ff15b29337e DEPENDS_ON SPDXRef-Package-golang.org.x.text-v0.3.6 
  1518
  1519##### Package representing the github.com/howeyc/gopass
  1520
  1521PackageName: github.com/howeyc/gopass
  1522SPDXID: SPDXRef-Package-github.com.howeyc.gopass-v0.0.0-20190910152052-7cb4b85ec19c
  1523PackageVersion: v0.0.0-20190910152052-7cb4b85ec19c
  1524PackageSupplier: NOASSERTION
  1525PackageDownloadLocation: NOASSERTION
  1526FilesAnalyzed: false
  1527PackageChecksum: SHA256: 9d00d401b09f8d272a15d65b242541ed5acbf7b91a9dda6a75e58e5e1248f79f
  1528PackageHomePage: https://github.com/howeyc/gopass
  1529PackageLicenseConcluded: NOASSERTION
  1530PackageLicenseDeclared: NOASSERTION
  1531PackageCopyrightText: NOASSERTION
  1532PackageLicenseComments: NOASSERTION
  1533PackageComment: NOASSERTION
  1534
  1535##### Package representing the github.com/zalando/go-keyring
  1536
  1537PackageName: github.com/zalando/go-keyring
  1538SPDXID: SPDXRef-Package-github.com.zalando.go-keyring-v0.1.1
  1539PackageVersion: v0.1.1
  1540PackageSupplier: NOASSERTION
  1541PackageDownloadLocation: NOASSERTION
  1542FilesAnalyzed: false
  1543PackageChecksum: SHA256: 8a3f321827a4aeb85811bae37d83c6e438242a888f45552e22b596e8285168c3
  1544PackageHomePage: https://github.com/zalando/go-keyring
  1545PackageLicenseConcluded: NOASSERTION
  1546PackageLicenseDeclared: NOASSERTION
  1547PackageCopyrightText: NOASSERTION
  1548PackageLicenseComments: NOASSERTION
  1549PackageComment: NOASSERTION
  1550
  1551##### Package representing the github.com/sassoftware/relic
  1552
  1553PackageName: github.com/sassoftware/relic
  1554SPDXID: SPDXRef-Package-github.com.sassoftware.relic-v7.2.1+incompatible
  1555PackageVersion: v7.2.1+incompatible
  1556PackageSupplier: NOASSERTION
  1557PackageDownloadLocation: NOASSERTION
  1558FilesAnalyzed: false
  1559PackageChecksum: SHA256: 1ba58336c70227b09e6b95fee0fe3dd77e3e7e75538635595eb8caba7788eadb
  1560PackageHomePage: https://github.com/sassoftware/relic
  1561PackageLicenseConcluded: NOASSERTION
  1562PackageLicenseDeclared: NOASSERTION
  1563PackageCopyrightText: NOASSERTION
  1564PackageLicenseComments: NOASSERTION
  1565PackageComment: NOASSERTION
  1566
  1567##### Package representing the github.com/jedisct1/go-minisign
  1568
  1569PackageName: github.com/jedisct1/go-minisign
  1570SPDXID: SPDXRef-Package-github.com.jedisct1.go-minisign-v0.0.0-20210414164026-819d7e2534ac
  1571PackageVersion: v0.0.0-20210414164026-819d7e2534ac
  1572PackageSupplier: NOASSERTION
  1573PackageDownloadLocation: NOASSERTION
  1574FilesAnalyzed: false
  1575PackageChecksum: SHA256: 5c51edc535c9ef254999ddd03ca153a667e97ceebc9d78810dd74407186dd5c6
  1576PackageHomePage: https://github.com/jedisct1/go-minisign
  1577PackageLicenseConcluded: NOASSERTION
  1578PackageLicenseDeclared: NOASSERTION
  1579PackageCopyrightText: NOASSERTION
  1580PackageLicenseComments: NOASSERTION
  1581PackageComment: NOASSERTION
  1582
  1583Relationship SPDXRef-Package-github.com.jedisct1.go-minisign-v0.0.0-20210414164026-819d7e2534ac DEPENDS_ON SPDXRef-Package-golang.org.x.crypto-v0.0.0-20210616213533-5ff15b29337e 
  1584
  1585##### Package representing the github.com/ghodss/yaml
  1586
  1587PackageName: github.com/ghodss/yaml
  1588SPDXID: SPDXRef-Package-github.com.ghodss.yaml-v1.0.0
  1589PackageVersion: v1.0.0
  1590PackageSupplier: NOASSERTION
  1591PackageDownloadLocation: NOASSERTION
  1592FilesAnalyzed: false
  1593PackageChecksum: SHA256: 8a601d3cc973a9e45f3c1c56f28377edf7d28cabaaca1668dce782c4607afdaa
  1594PackageHomePage: https://github.com/ghodss/yaml
  1595PackageLicenseConcluded: NOASSERTION
  1596PackageLicenseDeclared: NOASSERTION
  1597PackageCopyrightText: NOASSERTION
  1598PackageLicenseComments: NOASSERTION
  1599PackageComment: NOASSERTION
  1600
  1601##### Package representing the github.com/cavaliercoder/go-rpm
  1602
  1603PackageName: github.com/cavaliercoder/go-rpm
  1604SPDXID: SPDXRef-Package-github.com.cavaliercoder.go-rpm-v0.0.0-20200122174316-8cb9fd9c31a8
  1605PackageVersion: v0.0.0-20200122174316-8cb9fd9c31a8
  1606PackageSupplier: NOASSERTION
  1607PackageDownloadLocation: NOASSERTION
  1608FilesAnalyzed: false
  1609PackageChecksum: SHA256: 57cfc0c523cf3587fa4bc6430836c8da25b057b26826fb08b5d8b80964ae4ced
  1610PackageHomePage: https://github.com/cavaliercoder/go-rpm
  1611PackageLicenseConcluded: NOASSERTION
  1612PackageLicenseDeclared: NOASSERTION
  1613PackageCopyrightText: NOASSERTION
  1614PackageLicenseComments: NOASSERTION
  1615PackageComment: NOASSERTION
  1616
  1617##### Package representing the github.com/googleapis/gax-go/v2
  1618
  1619PackageName: github.com/googleapis/gax-go/v2
  1620SPDXID: SPDXRef-Package-github.com.googleapis.gax-go.v2-v2.0.5
  1621PackageVersion: v2.0.5
  1622PackageSupplier: NOASSERTION
  1623PackageDownloadLocation: NOASSERTION
  1624FilesAnalyzed: false
  1625PackageChecksum: SHA256: b8b7e67cfe0beb74db70984ea7278c8a2644f7190000b0230a603cf73db9be94
  1626PackageHomePage: https://github.com/googleapis/gax-go/v2
  1627PackageLicenseConcluded: NOASSERTION
  1628PackageLicenseDeclared: NOASSERTION
  1629PackageCopyrightText: NOASSERTION
  1630PackageLicenseComments: NOASSERTION
  1631PackageComment: NOASSERTION
  1632
  1633Relationship SPDXRef-Package-github.com.googleapis.gax-go.v2-v2.0.5 DEPENDS_ON SPDXRef-Package-google.golang.org.grpc-v1.38.0 
  1634
  1635##### Package representing the cloud.google.com/go
  1636
  1637PackageName: cloud.google.com/go
  1638SPDXID: SPDXRef-Package-cloud.google.com.go-v0.81.0
  1639PackageVersion: v0.81.0
  1640PackageSupplier: NOASSERTION
  1641PackageDownloadLocation: NOASSERTION
  1642FilesAnalyzed: false
  1643PackageChecksum: SHA256: 459733de8ac4d0d69eba97f5e4f4050395c9d9d05e6cba633e9247c7588232e9
  1644PackageHomePage: https://cloud.google.com/go
  1645PackageLicenseConcluded: NOASSERTION
  1646PackageLicenseDeclared: NOASSERTION
  1647PackageCopyrightText: NOASSERTION
  1648PackageLicenseComments: NOASSERTION
  1649PackageComment: NOASSERTION
  1650
  1651Relationship SPDXRef-Package-cloud.google.com.go-v0.81.0 DEPENDS_ON SPDXRef-Package-golang.org.x.oauth2-v0.0.0-20210514164344-f6687ab2804c 
  1652Relationship SPDXRef-Package-cloud.google.com.go-v0.81.0 DEPENDS_ON SPDXRef-Package-go.opencensus.io-v0.23.0 
  1653Relationship SPDXRef-Package-cloud.google.com.go-v0.81.0 DEPENDS_ON SPDXRef-Package-github.com.googleapis.gax-go.v2-v2.0.5 
  1654Relationship SPDXRef-Package-cloud.google.com.go-v0.81.0 DEPENDS_ON SPDXRef-Package-golang.org.x.time-v0.0.0-20210220033141-f8bda1e9f3ba 
  1655Relationship SPDXRef-Package-cloud.google.com.go-v0.81.0 DEPENDS_ON SPDXRef-Package-google.golang.org.grpc-v1.38.0 
  1656Relationship SPDXRef-Package-cloud.google.com.go-v0.81.0 DEPENDS_ON SPDXRef-Package-google.golang.org.api-v0.46.0 
  1657Relationship SPDXRef-Package-cloud.google.com.go-v0.81.0 DEPENDS_ON SPDXRef-Package-github.com.golang.protobuf-v1.5.2 
  1658Relationship SPDXRef-Package-cloud.google.com.go-v0.81.0 DEPENDS_ON SPDXRef-Package-golang.org.x.text-v0.3.6 
  1659Relationship SPDXRef-Package-cloud.google.com.go-v0.81.0 DEPENDS_ON SPDXRef-Package-github.com.google.go-cmp-v0.5.6 
  1660Relationship SPDXRef-Package-cloud.google.com.go-v0.81.0 DEPENDS_ON SPDXRef-Package-golang.org.x.net-v0.0.0-20210525063256-abc453219eb5 
  1661Relationship SPDXRef-Package-cloud.google.com.go-v0.81.0 DEPENDS_ON SPDXRef-Package-golang.org.x.sync-v0.0.0-20210220032951-036812b2e83c 
  1662Relationship SPDXRef-Package-cloud.google.com.go-v0.81.0 DEPENDS_ON SPDXRef-Package-golang.org.x.sys-v0.0.0-20210615035016-665e8c7367d1 
  1663Relationship SPDXRef-Package-cloud.google.com.go-v0.81.0 DEPENDS_ON SPDXRef-Package-github.com.golang.groupcache-v0.0.0-20210331224755-41bb18bfe9da 
  1664Relationship SPDXRef-Package-cloud.google.com.go-v0.81.0 DEPENDS_ON SPDXRef-Package-google.golang.org.genproto-v0.0.0-20210617175327-b9e0b3197ced 
  1665Relationship SPDXRef-Package-cloud.google.com.go-v0.81.0 DEPENDS_ON SPDXRef-Package-google.golang.org.protobuf-v1.26.0 
  1666
  1667##### Package representing the google.golang.org/api
  1668
  1669PackageName: google.golang.org/api
  1670SPDXID: SPDXRef-Package-google.golang.org.api-v0.46.0
  1671PackageVersion: v0.46.0
  1672PackageSupplier: NOASSERTION
  1673PackageDownloadLocation: NOASSERTION
  1674FilesAnalyzed: false
  1675PackageChecksum: SHA256: 9c27d3b7b736de1570971331811b59458ba57cf5d2cb57263c5c1b9cc1c4c474
  1676PackageHomePage: https://google.golang.org/api
  1677PackageLicenseConcluded: NOASSERTION
  1678PackageLicenseDeclared: NOASSERTION
  1679PackageCopyrightText: NOASSERTION
  1680PackageLicenseComments: NOASSERTION
  1681PackageComment: NOASSERTION
  1682
  1683Relationship SPDXRef-Package-google.golang.org.api-v0.46.0 DEPENDS_ON SPDXRef-Package-go.opencensus.io-v0.23.0 
  1684Relationship SPDXRef-Package-google.golang.org.api-v0.46.0 DEPENDS_ON SPDXRef-Package-google.golang.org.grpc-v1.38.0 
  1685Relationship SPDXRef-Package-google.golang.org.api-v0.46.0 DEPENDS_ON SPDXRef-Package-golang.org.x.text-v0.3.6 
  1686Relationship SPDXRef-Package-google.golang.org.api-v0.46.0 DEPENDS_ON SPDXRef-Package-google.golang.org.genproto-v0.0.0-20210617175327-b9e0b3197ced 
  1687Relationship SPDXRef-Package-google.golang.org.api-v0.46.0 DEPENDS_ON SPDXRef-Package-golang.org.x.net-v0.0.0-20210525063256-abc453219eb5 
  1688Relationship SPDXRef-Package-google.golang.org.api-v0.46.0 DEPENDS_ON SPDXRef-Package-cloud.google.com.go-v0.81.0 
  1689Relationship SPDXRef-Package-google.golang.org.api-v0.46.0 DEPENDS_ON SPDXRef-Package-github.com.google.go-cmp-v0.5.6 
  1690Relationship SPDXRef-Package-google.golang.org.api-v0.46.0 DEPENDS_ON SPDXRef-Package-github.com.googleapis.gax-go.v2-v2.0.5 
  1691Relationship SPDXRef-Package-google.golang.org.api-v0.46.0 DEPENDS_ON SPDXRef-Package-golang.org.x.oauth2-v0.0.0-20210514164344-f6687ab2804c 
  1692Relationship SPDXRef-Package-google.golang.org.api-v0.46.0 DEPENDS_ON SPDXRef-Package-golang.org.x.sync-v0.0.0-20210220032951-036812b2e83c 
  1693Relationship SPDXRef-Package-google.golang.org.api-v0.46.0 DEPENDS_ON SPDXRef-Package-golang.org.x.sys-v0.0.0-20210615035016-665e8c7367d1 
  1694Relationship SPDXRef-Package-google.golang.org.api-v0.46.0 DEPENDS_ON SPDXRef-Package-github.com.golang.protobuf-v1.5.2 
  1695
  1696##### Package representing the golang.org/x/oauth2
  1697
  1698PackageName: golang.org/x/oauth2
  1699SPDXID: SPDXRef-Package-golang.org.x.oauth2-v0.0.0-20210514164344-f6687ab2804c
  1700PackageVersion: v0.0.0-20210514164344-f6687ab2804c
  1701PackageSupplier: NOASSERTION
  1702PackageDownloadLocation: NOASSERTION
  1703FilesAnalyzed: false
  1704PackageChecksum: SHA256: 334a2a1b320de68c665dfdb61282dad09b343cd93b494ac1241522898bf253d3
  1705PackageHomePage: https://golang.org/x/oauth2
  1706PackageLicenseConcluded: NOASSERTION
  1707PackageLicenseDeclared: NOASSERTION
  1708PackageCopyrightText: NOASSERTION
  1709PackageLicenseComments: NOASSERTION
  1710PackageComment: NOASSERTION
  1711
  1712Relationship SPDXRef-Package-golang.org.x.oauth2-v0.0.0-20210514164344-f6687ab2804c DEPENDS_ON SPDXRef-Package-cloud.google.com.go-v0.81.0 
  1713Relationship SPDXRef-Package-golang.org.x.oauth2-v0.0.0-20210514164344-f6687ab2804c DEPENDS_ON SPDXRef-Package-golang.org.x.net-v0.0.0-20210525063256-abc453219eb5 
  1714Relationship SPDXRef-Package-golang.org.x.oauth2-v0.0.0-20210514164344-f6687ab2804c DEPENDS_ON SPDXRef-Package-golang.org.x.sync-v0.0.0-20210220032951-036812b2e83c 
  1715
  1716##### Package representing the go.opencensus.io
  1717
  1718PackageName: go.opencensus.io
  1719SPDXID: SPDXRef-Package-go.opencensus.io-v0.23.0
  1720PackageVersion: v0.23.0
  1721PackageSupplier: NOASSERTION
  1722PackageDownloadLocation: NOASSERTION
  1723FilesAnalyzed: false
  1724PackageChecksum: SHA256: 7c86fbad22be2d27398183a1288e4c2aabd20d14271492cd47651f23d3139bd6
  1725PackageHomePage: https://go.opencensus.io
  1726PackageLicenseConcluded: NOASSERTION
  1727PackageLicenseDeclared: NOASSERTION
  1728PackageCopyrightText: NOASSERTION
  1729PackageLicenseComments: NOASSERTION
  1730PackageComment: NOASSERTION
  1731
  1732Relationship SPDXRef-Package-go.opencensus.io-v0.23.0 DEPENDS_ON SPDXRef-Package-golang.org.x.text-v0.3.6 
  1733Relationship SPDXRef-Package-go.opencensus.io-v0.23.0 DEPENDS_ON SPDXRef-Package-google.golang.org.genproto-v0.0.0-20210617175327-b9e0b3197ced 
  1734Relationship SPDXRef-Package-go.opencensus.io-v0.23.0 DEPENDS_ON SPDXRef-Package-google.golang.org.api-v0.46.0 
  1735Relationship SPDXRef-Package-go.opencensus.io-v0.23.0 DEPENDS_ON SPDXRef-Package-github.com.prometheus.client-golang-v1.11.0 
  1736Relationship SPDXRef-Package-go.opencensus.io-v0.23.0 DEPENDS_ON SPDXRef-Package-google.golang.org.grpc-v1.38.0 
  1737Relationship SPDXRef-Package-go.opencensus.io-v0.23.0 DEPENDS_ON SPDXRef-Package-golang.org.x.net-v0.0.0-20210525063256-abc453219eb5 
  1738Relationship SPDXRef-Package-go.opencensus.io-v0.23.0 DEPENDS_ON SPDXRef-Package-github.com.golang.protobuf-v1.5.2 
  1739Relationship SPDXRef-Package-go.opencensus.io-v0.23.0 DEPENDS_ON SPDXRef-Package-github.com.google.go-cmp-v0.5.6 
  1740Relationship SPDXRef-Package-go.opencensus.io-v0.23.0 DEPENDS_ON SPDXRef-Package-github.com.golang.groupcache-v0.0.0-20210331224755-41bb18bfe9da 
  1741Relationship SPDXRef-Package-go.opencensus.io-v0.23.0 DEPENDS_ON SPDXRef-Package-golang.org.x.sys-v0.0.0-20210615035016-665e8c7367d1 
  1742
  1743##### Package representing the github.com/golang/groupcache
  1744
  1745PackageName: github.com/golang/groupcache
  1746SPDXID: SPDXRef-Package-github.com.golang.groupcache-v0.0.0-20210331224755-41bb18bfe9da
  1747PackageVersion: v0.0.0-20210331224755-41bb18bfe9da
  1748PackageSupplier: NOASSERTION
  1749PackageDownloadLocation: NOASSERTION
  1750FilesAnalyzed: false
  1751PackageChecksum: SHA256: 03f65147877c2e0084097490c88ede91762bc954dd9dcf77ddaf822ffc1ac168
  1752PackageHomePage: https://github.com/golang/groupcache
  1753PackageLicenseConcluded: NOASSERTION
  1754PackageLicenseDeclared: NOASSERTION
  1755PackageCopyrightText: NOASSERTION
  1756PackageLicenseComments: NOASSERTION
  1757PackageComment: NOASSERTION
  1758
  1759##### Package representing the github.com/google/go-cmp
  1760
  1761PackageName: github.com/google/go-cmp
  1762SPDXID: SPDXRef-Package-github.com.google.go-cmp-v0.5.6
  1763PackageVersion: v0.5.6
  1764PackageSupplier: NOASSERTION
  1765PackageDownloadLocation: NOASSERTION
  1766FilesAnalyzed: false
  1767PackageChecksum: SHA256: e95afd232d9a38271d4252ccccc027ddc13aaea55345ca12be0df6462bb75687
  1768PackageHomePage: https://github.com/google/go-cmp
  1769PackageLicenseConcluded: NOASSERTION
  1770PackageLicenseDeclared: NOASSERTION
  1771PackageCopyrightText: NOASSERTION
  1772PackageLicenseComments: NOASSERTION
  1773PackageComment: NOASSERTION
  1774
  1775##### Package representing the github.com/hashicorp/errwrap
  1776
  1777PackageName: github.com/hashicorp/errwrap
  1778SPDXID: SPDXRef-Package-github.com.hashicorp.errwrap-v1.1.0
  1779PackageVersion: v1.1.0
  1780PackageSupplier: NOASSERTION
  1781PackageDownloadLocation: NOASSERTION
  1782FilesAnalyzed: false
  1783PackageChecksum: SHA256: 047a321b836f7f66764f46fc2887ac21a3eac0b22b6c8fb8896fab7db6da622f
  1784PackageHomePage: https://github.com/hashicorp/errwrap
  1785PackageLicenseConcluded: NOASSERTION
  1786PackageLicenseDeclared: NOASSERTION
  1787PackageCopyrightText: NOASSERTION
  1788PackageLicenseComments: NOASSERTION
  1789PackageComment: NOASSERTION
  1790
  1791##### Package representing the github.com/hashicorp/go-cleanhttp
  1792
  1793PackageName: github.com/hashicorp/go-cleanhttp
  1794SPDXID: SPDXRef-Package-github.com.hashicorp.go-cleanhttp-v0.5.2
  1795PackageVersion: v0.5.2
  1796PackageSupplier: NOASSERTION
  1797PackageDownloadLocation: NOASSERTION
  1798FilesAnalyzed: false
  1799PackageChecksum: SHA256: 850ecf5976cd640a31d2c94b7fe0fddeb3b40186965f372ad54a254e3bd0dd8f
  1800PackageHomePage: https://github.com/hashicorp/go-cleanhttp
  1801PackageLicenseConcluded: NOASSERTION
  1802PackageLicenseDeclared: NOASSERTION
  1803PackageCopyrightText: NOASSERTION
  1804PackageLicenseComments: NOASSERTION
  1805PackageComment: NOASSERTION
  1806
  1807##### Package representing the github.com/hashicorp/go-multierror
  1808
  1809PackageName: github.com/hashicorp/go-multierror
  1810SPDXID: SPDXRef-Package-github.com.hashicorp.go-multierror-v1.1.1
  1811PackageVersion: v1.1.1
  1812PackageSupplier: NOASSERTION
  1813PackageDownloadLocation: NOASSERTION
  1814FilesAnalyzed: false
  1815PackageChecksum: SHA256: f903a790c3fd699e65977baa2c4bb911282266395b92a232e0ceeafc38b1eaf2
  1816PackageHomePage: https://github.com/hashicorp/go-multierror
  1817PackageLicenseConcluded: NOASSERTION
  1818PackageLicenseDeclared: NOASSERTION
  1819PackageCopyrightText: NOASSERTION
  1820PackageLicenseComments: NOASSERTION
  1821PackageComment: NOASSERTION
  1822
  1823Relationship SPDXRef-Package-github.com.hashicorp.go-multierror-v1.1.1 DEPENDS_ON SPDXRef-Package-github.com.hashicorp.errwrap-v1.1.0 
  1824
  1825##### Package representing the github.com/hashicorp/go-retryablehttp
  1826
  1827PackageName: github.com/hashicorp/go-retryablehttp
  1828SPDXID: SPDXRef-Package-github.com.hashicorp.go-retryablehttp-v0.6.8
  1829PackageVersion: v0.6.8
  1830PackageSupplier: NOASSERTION
  1831PackageDownloadLocation: NOASSERTION
  1832FilesAnalyzed: false
  1833PackageChecksum: SHA256: 7b1c176e794c9eac1776346636ac0f6a6e4b592a092d6263d518e2a230d7461c
  1834PackageHomePage: https://github.com/hashicorp/go-retryablehttp
  1835PackageLicenseConcluded: NOASSERTION
  1836PackageLicenseDeclared: NOASSERTION
  1837PackageCopyrightText: NOASSERTION
  1838PackageLicenseComments: NOASSERTION
  1839PackageComment: NOASSERTION
  1840
  1841Relationship SPDXRef-Package-github.com.hashicorp.go-retryablehttp-v0.6.8 DEPENDS_ON SPDXRef-Package-github.com.hashicorp.go-cleanhttp-v0.5.2 
  1842
  1843##### Package representing the github.com/hashicorp/go-rootcerts
  1844
  1845PackageName: github.com/hashicorp/go-rootcerts
  1846SPDXID: SPDXRef-Package-github.com.hashicorp.go-rootcerts-v1.0.2
  1847PackageVersion: v1.0.2
  1848PackageSupplier: NOASSERTION
  1849PackageDownloadLocation: NOASSERTION
  1850FilesAnalyzed: false
  1851PackageChecksum: SHA256: d42cdbf7b568f432127ee9d549060acbfb08ab2a527d059e0e12e84224d9b590
  1852PackageHomePage: https://github.com/hashicorp/go-rootcerts
  1853PackageLicenseConcluded: NOASSERTION
  1854PackageLicenseDeclared: NOASSERTION
  1855PackageCopyrightText: NOASSERTION
  1856PackageLicenseComments: NOASSERTION
  1857PackageComment: NOASSERTION
  1858
  1859Relationship SPDXRef-Package-github.com.hashicorp.go-rootcerts-v1.0.2 DEPENDS_ON SPDXRef-Package-github.com.mitchellh.go-homedir-v1.1.0 
  1860
  1861##### Package representing the github.com/hashicorp/vault/sdk
  1862
  1863PackageName: github.com/hashicorp/vault/sdk
  1864SPDXID: SPDXRef-Package-github.com.hashicorp.vault.sdk-v0.2.0
  1865PackageVersion: v0.2.0
  1866PackageSupplier: NOASSERTION
  1867PackageDownloadLocation: NOASSERTION
  1868FilesAnalyzed: false
  1869PackageChecksum: SHA256: 21e28009edebedb97dc5fc5d340838c747e25934dc1606af952be083cd9c6c66
  1870PackageHomePage: https://github.com/hashicorp/vault/sdk
  1871PackageLicenseConcluded: NOASSERTION
  1872PackageLicenseDeclared: NOASSERTION
  1873PackageCopyrightText: NOASSERTION
  1874PackageLicenseComments: NOASSERTION
  1875PackageComment: NOASSERTION
  1876
  1877Relationship SPDXRef-Package-github.com.hashicorp.vault.sdk-v0.2.0 DEPENDS_ON SPDXRef-Package-github.com.hashicorp.errwrap-v1.1.0 
  1878Relationship SPDXRef-Package-github.com.hashicorp.vault.sdk-v0.2.0 DEPENDS_ON SPDXRef-Package-github.com.hashicorp.go-cleanhttp-v0.5.2 
  1879Relationship SPDXRef-Package-github.com.hashicorp.vault.sdk-v0.2.0 DEPENDS_ON SPDXRef-Package-github.com.mitchellh.mapstructure-v1.4.1 
  1880Relationship SPDXRef-Package-github.com.hashicorp.vault.sdk-v0.2.0 DEPENDS_ON SPDXRef-Package-github.com.opencontainers.image-spec-v1.0.1 
  1881Relationship SPDXRef-Package-github.com.hashicorp.vault.sdk-v0.2.0 DEPENDS_ON SPDXRef-Package-github.com.pierrec.lz4-v2.6.0+incompatible 
  1882Relationship SPDXRef-Package-github.com.hashicorp.vault.sdk-v0.2.0 DEPENDS_ON SPDXRef-Package-golang.org.x.time-v0.0.0-20210220033141-f8bda1e9f3ba 
  1883Relationship SPDXRef-Package-github.com.hashicorp.vault.sdk-v0.2.0 DEPENDS_ON SPDXRef-Package-github.com.docker.distribution-v2.7.1+incompatible 
  1884Relationship SPDXRef-Package-github.com.hashicorp.vault.sdk-v0.2.0 DEPENDS_ON SPDXRef-Package-github.com.gorilla.mux-v1.8.0 
  1885Relationship SPDXRef-Package-github.com.hashicorp.vault.sdk-v0.2.0 DEPENDS_ON SPDXRef-Package-github.com.hashicorp.vault.api-v1.1.0 
  1886Relationship SPDXRef-Package-github.com.hashicorp.vault.sdk-v0.2.0 DEPENDS_ON SPDXRef-Package-github.com.opencontainers.go-digest-v1.0.0 
  1887Relationship SPDXRef-Package-github.com.hashicorp.vault.sdk-v0.2.0 DEPENDS_ON SPDXRef-Package-golang.org.x.net-v0.0.0-20210525063256-abc453219eb5 
  1888Relationship SPDXRef-Package-github.com.hashicorp.vault.sdk-v0.2.0 DEPENDS_ON SPDXRef-Package-golang.org.x.sys-v0.0.0-20210615035016-665e8c7367d1 
  1889Relationship SPDXRef-Package-github.com.hashicorp.vault.sdk-v0.2.0 DEPENDS_ON SPDXRef-Package-google.golang.org.protobuf-v1.26.0 
  1890Relationship SPDXRef-Package-github.com.hashicorp.vault.sdk-v0.2.0 DEPENDS_ON SPDXRef-Package-github.com.golang.protobuf-v1.5.2 
  1891Relationship SPDXRef-Package-github.com.hashicorp.vault.sdk-v0.2.0 DEPENDS_ON SPDXRef-Package-github.com.hashicorp.go-sockaddr-v1.0.2 
  1892Relationship SPDXRef-Package-github.com.hashicorp.vault.sdk-v0.2.0 DEPENDS_ON SPDXRef-Package-github.com.pkg.errors-v0.9.1 
  1893Relationship SPDXRef-Package-github.com.hashicorp.vault.sdk-v0.2.0 DEPENDS_ON SPDXRef-Package-github.com.ryanuber.go-glob-v1.0.0 
  1894Relationship SPDXRef-Package-github.com.hashicorp.vault.sdk-v0.2.0 DEPENDS_ON SPDXRef-Package-github.com.docker.docker-v1.4.2-0.20200319182547-c7ad2b866182 
  1895Relationship SPDXRef-Package-github.com.hashicorp.vault.sdk-v0.2.0 DEPENDS_ON SPDXRef-Package-github.com.hashicorp.go-multierror-v1.1.1 
  1896Relationship SPDXRef-Package-github.com.hashicorp.vault.sdk-v0.2.0 DEPENDS_ON SPDXRef-Package-github.com.hashicorp.hcl-v1.0.0 
  1897Relationship SPDXRef-Package-github.com.hashicorp.vault.sdk-v0.2.0 DEPENDS_ON SPDXRef-Package-golang.org.x.crypto-v0.0.0-20210616213533-5ff15b29337e 
  1898Relationship SPDXRef-Package-github.com.hashicorp.vault.sdk-v0.2.0 DEPENDS_ON SPDXRef-Package-google.golang.org.grpc-v1.38.0 
  1899Relationship SPDXRef-Package-github.com.hashicorp.vault.sdk-v0.2.0 DEPENDS_ON SPDXRef-Package-gopkg.in.square.go-jose.v2-v2.5.1 
  1900Relationship SPDXRef-Package-github.com.hashicorp.vault.sdk-v0.2.0 DEPENDS_ON SPDXRef-Package-github.com.golang.snappy-v0.0.3 
  1901Relationship SPDXRef-Package-github.com.hashicorp.vault.sdk-v0.2.0 DEPENDS_ON SPDXRef-Package-github.com.hashicorp.go-retryablehttp-v0.6.8 
  1902
  1903##### Package representing the github.com/golang/snappy
  1904
  1905PackageName: github.com/golang/snappy
  1906SPDXID: SPDXRef-Package-github.com.golang.snappy-v0.0.3
  1907PackageVersion: v0.0.3
  1908PackageSupplier: NOASSERTION
  1909PackageDownloadLocation: NOASSERTION
  1910FilesAnalyzed: false
  1911PackageChecksum: SHA256: ec86cb9791c62c2bc5f0f9dd332d61198c4cf6f40818e67135a45cde051b40b4
  1912PackageHomePage: https://github.com/golang/snappy
  1913PackageLicenseConcluded: NOASSERTION
  1914PackageLicenseDeclared: NOASSERTION
  1915PackageCopyrightText: NOASSERTION
  1916PackageLicenseComments: NOASSERTION
  1917PackageComment: NOASSERTION
  1918
  1919##### Package representing the github.com/pierrec/lz4
  1920
  1921PackageName: github.com/pierrec/lz4
  1922SPDXID: SPDXRef-Package-github.com.pierrec.lz4-v2.6.0+incompatible
  1923PackageVersion: v2.6.0+incompatible
  1924PackageSupplier: NOASSERTION
  1925PackageDownloadLocation: NOASSERTION
  1926FilesAnalyzed: false
  1927PackageChecksum: SHA256: 4de292b0e083fe4176c7b02ae284a4b4c24c88744cfa0398f94b0d2229184192
  1928PackageHomePage: https://github.com/pierrec/lz4
  1929PackageLicenseConcluded: NOASSERTION
  1930PackageLicenseDeclared: NOASSERTION
  1931PackageCopyrightText: NOASSERTION
  1932PackageLicenseComments: NOASSERTION
  1933PackageComment: NOASSERTION
  1934
  1935##### Package representing the github.com/hashicorp/go-sockaddr
  1936
  1937PackageName: github.com/hashicorp/go-sockaddr
  1938SPDXID: SPDXRef-Package-github.com.hashicorp.go-sockaddr-v1.0.2
  1939PackageVersion: v1.0.2
  1940PackageSupplier: NOASSERTION
  1941PackageDownloadLocation: NOASSERTION
  1942FilesAnalyzed: false
  1943PackageChecksum: SHA256: 3b91d4c2b863af23838e2f6b983ffe9c2cf4741995ce97e6ecf781876443ccc9
  1944PackageHomePage: https://github.com/hashicorp/go-sockaddr
  1945PackageLicenseConcluded: NOASSERTION
  1946PackageLicenseDeclared: NOASSERTION
  1947PackageCopyrightText: NOASSERTION
  1948PackageLicenseComments: NOASSERTION
  1949PackageComment: NOASSERTION
  1950
  1951Relationship SPDXRef-Package-github.com.hashicorp.go-sockaddr-v1.0.2 DEPENDS_ON SPDXRef-Package-github.com.hashicorp.errwrap-v1.1.0 
  1952
  1953##### Package representing the github.com/ryanuber/go-glob
  1954
  1955PackageName: github.com/ryanuber/go-glob
  1956SPDXID: SPDXRef-Package-github.com.ryanuber.go-glob-v1.0.0
  1957PackageVersion: v1.0.0
  1958PackageSupplier: NOASSERTION
  1959PackageDownloadLocation: NOASSERTION
  1960FilesAnalyzed: false
  1961PackageChecksum: SHA256: e4a59b9bcddd0bfaebb26f2cd34aae2c85f80acf9d97c5cc6e98a262a3deefbd
  1962PackageHomePage: https://github.com/ryanuber/go-glob
  1963PackageLicenseConcluded: NOASSERTION
  1964PackageLicenseDeclared: NOASSERTION
  1965PackageCopyrightText: NOASSERTION
  1966PackageLicenseComments: NOASSERTION
  1967PackageComment: NOASSERTION
  1968
  1969##### Package representing the golang.org/x/time
  1970
  1971PackageName: golang.org/x/time
  1972SPDXID: SPDXRef-Package-golang.org.x.time-v0.0.0-20210220033141-f8bda1e9f3ba
  1973PackageVersion: v0.0.0-20210220033141-f8bda1e9f3ba
  1974PackageSupplier: NOASSERTION
  1975PackageDownloadLocation: NOASSERTION
  1976FilesAnalyzed: false
  1977PackageChecksum: SHA256: 9eb556e6f8c487b07629dbd90cf04320501894e9f491d2a22b89593e28e24df2
  1978PackageHomePage: https://golang.org/x/time
  1979PackageLicenseConcluded: NOASSERTION
  1980PackageLicenseDeclared: NOASSERTION
  1981PackageCopyrightText: NOASSERTION
  1982PackageLicenseComments: NOASSERTION
  1983PackageComment: NOASSERTION
  1984
  1985##### Package representing the gopkg.in/square/go-jose.v2
  1986
  1987PackageName: gopkg.in/square/go-jose.v2
  1988SPDXID: SPDXRef-Package-gopkg.in.square.go-jose.v2-v2.5.1
  1989PackageVersion: v2.5.1
  1990PackageSupplier: NOASSERTION
  1991PackageDownloadLocation: NOASSERTION
  1992FilesAnalyzed: false
  1993PackageChecksum: SHA256: b35860f881c48c56d045f6600a446bc8ccb4d849932abdb2a4b5bb8d3efd14a2
  1994PackageHomePage: https://gopkg.in/square/go-jose.v2
  1995PackageLicenseConcluded: NOASSERTION
  1996PackageLicenseDeclared: NOASSERTION
  1997PackageCopyrightText: NOASSERTION
  1998PackageLicenseComments: NOASSERTION
  1999PackageComment: NOASSERTION
  2000
  2001##### Package representing the github.com/hashicorp/vault/api
  2002
  2003PackageName: github.com/hashicorp/vault/api
  2004SPDXID: SPDXRef-Package-github.com.hashicorp.vault.api-v1.1.0
  2005PackageVersion: v1.1.0
  2006PackageSupplier: NOASSERTION
  2007PackageDownloadLocation: NOASSERTION
  2008FilesAnalyzed: false
  2009PackageChecksum: SHA256: 7384684d18b6cdf97e9ac93b246657168a65f656a5ef7501e5972de8f20b25b6
  2010PackageHomePage: https://github.com/hashicorp/vault/api
  2011PackageLicenseConcluded: NOASSERTION
  2012PackageLicenseDeclared: NOASSERTION
  2013PackageCopyrightText: NOASSERTION
  2014PackageLicenseComments: NOASSERTION
  2015PackageComment: NOASSERTION
  2016
  2017Relationship SPDXRef-Package-github.com.hashicorp.vault.api-v1.1.0 DEPENDS_ON SPDXRef-Package-github.com.hashicorp.go-cleanhttp-v0.5.2 
  2018Relationship SPDXRef-Package-github.com.hashicorp.vault.api-v1.1.0 DEPENDS_ON SPDXRef-Package-github.com.hashicorp.go-multierror-v1.1.1 
  2019Relationship SPDXRef-Package-github.com.hashicorp.vault.api-v1.1.0 DEPENDS_ON SPDXRef-Package-github.com.hashicorp.go-retryablehttp-v0.6.8 
  2020Relationship SPDXRef-Package-github.com.hashicorp.vault.api-v1.1.0 DEPENDS_ON SPDXRef-Package-github.com.hashicorp.go-rootcerts-v1.0.2 
  2021Relationship SPDXRef-Package-github.com.hashicorp.vault.api-v1.1.0 DEPENDS_ON SPDXRef-Package-github.com.hashicorp.vault.sdk-v0.2.0 
  2022Relationship SPDXRef-Package-github.com.hashicorp.vault.api-v1.1.0 DEPENDS_ON SPDXRef-Package-golang.org.x.net-v0.0.0-20210525063256-abc453219eb5 
  2023Relationship SPDXRef-Package-github.com.hashicorp.vault.api-v1.1.0 DEPENDS_ON SPDXRef-Package-github.com.hashicorp.errwrap-v1.1.0 
  2024Relationship SPDXRef-Package-github.com.hashicorp.vault.api-v1.1.0 DEPENDS_ON SPDXRef-Package-github.com.hashicorp.hcl-v1.0.0 
  2025Relationship SPDXRef-Package-github.com.hashicorp.vault.api-v1.1.0 DEPENDS_ON SPDXRef-Package-github.com.mitchellh.mapstructure-v1.4.1 
  2026Relationship SPDXRef-Package-github.com.hashicorp.vault.api-v1.1.0 DEPENDS_ON SPDXRef-Package-golang.org.x.time-v0.0.0-20210220033141-f8bda1e9f3ba 
  2027Relationship SPDXRef-Package-github.com.hashicorp.vault.api-v1.1.0 DEPENDS_ON SPDXRef-Package-gopkg.in.square.go-jose.v2-v2.5.1 
  2028
  2029##### Package representing the github.com/theupdateframework/go-tuf
  2030
  2031PackageName: github.com/theupdateframework/go-tuf
  2032SPDXID: SPDXRef-Package-github.com.theupdateframework.go-tuf-v0.0.0-20201230183259-aee6270feb55
  2033PackageVersion: v0.0.0-20201230183259-aee6270feb55
  2034PackageSupplier: NOASSERTION
  2035PackageDownloadLocation: NOASSERTION
  2036FilesAnalyzed: false
  2037PackageChecksum: SHA256: ed391d786e0359002979453c3fc82a8eadf5e3e275ef4a15027a9e9147644262
  2038PackageHomePage: https://github.com/theupdateframework/go-tuf
  2039PackageLicenseConcluded: NOASSERTION
  2040PackageLicenseDeclared: NOASSERTION
  2041PackageCopyrightText: NOASSERTION
  2042PackageLicenseComments: NOASSERTION
  2043PackageComment: NOASSERTION
  2044
  2045Relationship SPDXRef-Package-github.com.theupdateframework.go-tuf-v0.0.0-20201230183259-aee6270feb55 DEPENDS_ON SPDXRef-Package-golang.org.x.crypto-v0.0.0-20210616213533-5ff15b29337e 
  2046
  2047##### Package representing the github.com/coreos/go-oidc/v3
  2048
  2049PackageName: github.com/coreos/go-oidc/v3
  2050SPDXID: SPDXRef-Package-github.com.coreos.go-oidc.v3-v3.0.0
  2051PackageVersion: v3.0.0
  2052PackageSupplier: NOASSERTION
  2053PackageDownloadLocation: NOASSERTION
  2054FilesAnalyzed: false
  2055PackageChecksum: SHA256: 9b01858cab936242c2c4957f7c158cd678af5eb7151bd2af80f33eef9ec12ad2
  2056PackageHomePage: https://github.com/coreos/go-oidc/v3
  2057PackageLicenseConcluded: NOASSERTION
  2058PackageLicenseDeclared: NOASSERTION
  2059PackageCopyrightText: NOASSERTION
  2060PackageLicenseComments: NOASSERTION
  2061PackageComment: NOASSERTION
  2062
  2063Relationship SPDXRef-Package-github.com.coreos.go-oidc.v3-v3.0.0 DEPENDS_ON SPDXRef-Package-golang.org.x.net-v0.0.0-20210525063256-abc453219eb5 
  2064Relationship SPDXRef-Package-github.com.coreos.go-oidc.v3-v3.0.0 DEPENDS_ON SPDXRef-Package-golang.org.x.oauth2-v0.0.0-20210514164344-f6687ab2804c 
  2065Relationship SPDXRef-Package-github.com.coreos.go-oidc.v3-v3.0.0 DEPENDS_ON SPDXRef-Package-gopkg.in.square.go-jose.v2-v2.5.1 
  2066Relationship SPDXRef-Package-github.com.coreos.go-oidc.v3-v3.0.0 DEPENDS_ON SPDXRef-Package-github.com.google.go-cmp-v0.5.6 
  2067
  2068##### Package representing the github.com/sigstore/fulcio
  2069
  2070PackageName: github.com/sigstore/fulcio
  2071SPDXID: SPDXRef-Package-github.com.sigstore.fulcio-v0.0.0-20210405115948-e7630f533fca
  2072PackageVersion: v0.0.0-20210405115948-e7630f533fca
  2073PackageSupplier: NOASSERTION
  2074PackageDownloadLocation: NOASSERTION
  2075FilesAnalyzed: false
  2076PackageChecksum: SHA256: e9fed9477691b8fbffc2f6bef6ca60b9f167db0cb53898280b49cfd930a54e05
  2077PackageHomePage: https://github.com/sigstore/fulcio
  2078PackageLicenseConcluded: NOASSERTION
  2079PackageLicenseDeclared: NOASSERTION
  2080PackageCopyrightText: NOASSERTION
  2081PackageLicenseComments: NOASSERTION
  2082PackageComment: NOASSERTION
  2083
  2084Relationship SPDXRef-Package-github.com.sigstore.fulcio-v0.0.0-20210405115948-e7630f533fca DEPENDS_ON SPDXRef-Package-google.golang.org.genproto-v0.0.0-20210617175327-b9e0b3197ced 
  2085Relationship SPDXRef-Package-github.com.sigstore.fulcio-v0.0.0-20210405115948-e7630f533fca DEPENDS_ON SPDXRef-Package-golang.org.x.net-v0.0.0-20210525063256-abc453219eb5 
  2086Relationship SPDXRef-Package-github.com.sigstore.fulcio-v0.0.0-20210405115948-e7630f533fca DEPENDS_ON SPDXRef-Package-go.uber.org.zap-v1.16.0 
  2087Relationship SPDXRef-Package-github.com.sigstore.fulcio-v0.0.0-20210405115948-e7630f533fca DEPENDS_ON SPDXRef-Package-github.com.prometheus.client-golang-v1.11.0 
  2088Relationship SPDXRef-Package-github.com.sigstore.fulcio-v0.0.0-20210405115948-e7630f533fca DEPENDS_ON SPDXRef-Package-github.com.pelletier.go-toml-v1.9.3 
  2089Relationship SPDXRef-Package-github.com.sigstore.fulcio-v0.0.0-20210405115948-e7630f533fca DEPENDS_ON SPDXRef-Package-cloud.google.com.go-v0.81.0 
  2090Relationship SPDXRef-Package-github.com.sigstore.fulcio-v0.0.0-20210405115948-e7630f533fca DEPENDS_ON SPDXRef-Package-google.golang.org.protobuf-v1.26.0 
  2091Relationship SPDXRef-Package-github.com.sigstore.fulcio-v0.0.0-20210405115948-e7630f533fca DEPENDS_ON SPDXRef-Package-github.com.go-openapi.loads-v0.20.2 
  2092Relationship SPDXRef-Package-github.com.sigstore.fulcio-v0.0.0-20210405115948-e7630f533fca DEPENDS_ON SPDXRef-Package-github.com.go-openapi.errors-v0.20.0 
  2093Relationship SPDXRef-Package-github.com.sigstore.fulcio-v0.0.0-20210405115948-e7630f533fca DEPENDS_ON SPDXRef-Package-github.com.go-openapi.strfmt-v0.20.1 
  2094Relationship SPDXRef-Package-github.com.sigstore.fulcio-v0.0.0-20210405115948-e7630f533fca DEPENDS_ON SPDXRef-Package-github.com.mailru.easyjson-v0.7.7 
  2095Relationship SPDXRef-Package-github.com.sigstore.fulcio-v0.0.0-20210405115948-e7630f533fca DEPENDS_ON SPDXRef-Package-github.com.spf13.afero-v1.6.0 
  2096Relationship SPDXRef-Package-github.com.sigstore.fulcio-v0.0.0-20210405115948-e7630f533fca DEPENDS_ON SPDXRef-Package-github.com.spf13.jwalterweatherman-v1.1.0 
  2097Relationship SPDXRef-Package-github.com.sigstore.fulcio-v0.0.0-20210405115948-e7630f533fca DEPENDS_ON SPDXRef-Package-github.com.spf13.cobra-v1.1.3 
  2098Relationship SPDXRef-Package-github.com.sigstore.fulcio-v0.0.0-20210405115948-e7630f533fca DEPENDS_ON SPDXRef-Package-github.com.mitchellh.mapstructure-v1.4.1 
  2099Relationship SPDXRef-Package-github.com.sigstore.fulcio-v0.0.0-20210405115948-e7630f533fca DEPENDS_ON SPDXRef-Package-github.com.go-openapi.spec-v0.20.3 
  2100Relationship SPDXRef-Package-github.com.sigstore.fulcio-v0.0.0-20210405115948-e7630f533fca DEPENDS_ON SPDXRef-Package-github.com.go-openapi.runtime-v0.19.29 
  2101Relationship SPDXRef-Package-github.com.sigstore.fulcio-v0.0.0-20210405115948-e7630f533fca DEPENDS_ON SPDXRef-Package-github.com.spf13.viper-v1.7.1 
  2102Relationship SPDXRef-Package-github.com.sigstore.fulcio-v0.0.0-20210405115948-e7630f533fca DEPENDS_ON SPDXRef-Package-github.com.go-openapi.swag-v0.19.15 
  2103Relationship SPDXRef-Package-github.com.sigstore.fulcio-v0.0.0-20210405115948-e7630f533fca DEPENDS_ON SPDXRef-Package-github.com.go-chi.chi-v4.1.2+incompatible 
  2104Relationship SPDXRef-Package-github.com.sigstore.fulcio-v0.0.0-20210405115948-e7630f533fca DEPENDS_ON SPDXRef-Package-github.com.fsnotify.fsnotify-v1.4.9 
  2105Relationship SPDXRef-Package-github.com.sigstore.fulcio-v0.0.0-20210405115948-e7630f533fca DEPENDS_ON SPDXRef-Package-github.com.coreos.go-oidc.v3-v3.0.0 
  2106Relationship SPDXRef-Package-github.com.sigstore.fulcio-v0.0.0-20210405115948-e7630f533fca DEPENDS_ON SPDXRef-Package-github.com.magiconair.properties-v1.8.5 
  2107Relationship SPDXRef-Package-github.com.sigstore.fulcio-v0.0.0-20210405115948-e7630f533fca DEPENDS_ON SPDXRef-Package-golang.org.x.oauth2-v0.0.0-20210514164344-f6687ab2804c 
  2108Relationship SPDXRef-Package-github.com.sigstore.fulcio-v0.0.0-20210405115948-e7630f533fca DEPENDS_ON SPDXRef-Package-github.com.segmentio.ksuid-v1.0.3 
  2109Relationship SPDXRef-Package-github.com.sigstore.fulcio-v0.0.0-20210405115948-e7630f533fca DEPENDS_ON SPDXRef-Package-github.com.mitchellh.go-homedir-v1.1.0 
  2110Relationship SPDXRef-Package-github.com.sigstore.fulcio-v0.0.0-20210405115948-e7630f533fca DEPENDS_ON SPDXRef-Package-gopkg.in.ini.v1-v1.62.0 
  2111Relationship SPDXRef-Package-github.com.sigstore.fulcio-v0.0.0-20210405115948-e7630f533fca DEPENDS_ON SPDXRef-Package-github.com.spf13.pflag-v1.0.5 
  2112Relationship SPDXRef-Package-github.com.sigstore.fulcio-v0.0.0-20210405115948-e7630f533fca DEPENDS_ON SPDXRef-Package-github.com.spf13.cast-v1.3.1 
  2113Relationship SPDXRef-Package-github.com.sigstore.fulcio-v0.0.0-20210405115948-e7630f533fca DEPENDS_ON SPDXRef-Package-github.com.skratchdot.open-golang-v0.0.0-20200116055534-eef842397966 
  2114Relationship SPDXRef-Package-github.com.sigstore.fulcio-v0.0.0-20210405115948-e7630f533fca DEPENDS_ON SPDXRef-Package-github.com.go-openapi.validate-v0.20.2 
  2115Relationship SPDXRef-Package-github.com.sigstore.fulcio-v0.0.0-20210405115948-e7630f533fca DEPENDS_ON SPDXRef-Package-golang.org.x.crypto-v0.0.0-20210616213533-5ff15b29337e 
  2116
  2117##### Package representing the github.com/segmentio/ksuid
  2118
  2119PackageName: github.com/segmentio/ksuid
  2120SPDXID: SPDXRef-Package-github.com.segmentio.ksuid-v1.0.3
  2121PackageVersion: v1.0.3
  2122PackageSupplier: NOASSERTION
  2123PackageDownloadLocation: NOASSERTION
  2124FilesAnalyzed: false
  2125PackageChecksum: SHA256: 58179fe001a088e616b1848aec64d6fd5c8a8e79e88856e58812b58f3835500d
  2126PackageHomePage: https://github.com/segmentio/ksuid
  2127PackageLicenseConcluded: NOASSERTION
  2128PackageLicenseDeclared: NOASSERTION
  2129PackageCopyrightText: NOASSERTION
  2130PackageLicenseComments: NOASSERTION
  2131PackageComment: NOASSERTION
  2132
  2133##### Package representing the github.com/skratchdot/open-golang
  2134
  2135PackageName: github.com/skratchdot/open-golang
  2136SPDXID: SPDXRef-Package-github.com.skratchdot.open-golang-v0.0.0-20200116055534-eef842397966
  2137PackageVersion: v0.0.0-20200116055534-eef842397966
  2138PackageSupplier: NOASSERTION
  2139PackageDownloadLocation: NOASSERTION
  2140FilesAnalyzed: false
  2141PackageChecksum: SHA256: 0977118b561a46782a4ec19fcf21d79280b78fde20bc3c77219e70d5aa878e46
  2142PackageHomePage: https://github.com/skratchdot/open-golang
  2143PackageLicenseConcluded: NOASSERTION
  2144PackageLicenseDeclared: NOASSERTION
  2145PackageCopyrightText: NOASSERTION
  2146PackageLicenseComments: NOASSERTION
  2147PackageComment: NOASSERTION
  2148
  2149##### Package representing the github.com/gogo/protobuf
  2150
  2151PackageName: github.com/gogo/protobuf
  2152SPDXID: SPDXRef-Package-github.com.gogo.protobuf-v1.3.2
  2153PackageVersion: v1.3.2
  2154PackageSupplier: NOASSERTION
  2155PackageDownloadLocation: NOASSERTION
  2156FilesAnalyzed: false
  2157PackageChecksum: SHA256: 95d3fe25fc8e393da0e7135467b6699f4d0bf5f62ac93014def07a6ebc840536
  2158PackageHomePage: https://github.com/gogo/protobuf
  2159PackageLicenseConcluded: NOASSERTION
  2160PackageLicenseDeclared: NOASSERTION
  2161PackageCopyrightText: NOASSERTION
  2162PackageLicenseComments: NOASSERTION
  2163PackageComment: NOASSERTION
  2164
  2165##### Package representing the gopkg.in/inf.v0
  2166
  2167PackageName: gopkg.in/inf.v0
  2168SPDXID: SPDXRef-Package-gopkg.in.inf.v0-v0.9.1
  2169PackageVersion: v0.9.1
  2170PackageSupplier: NOASSERTION
  2171PackageDownloadLocation: NOASSERTION
  2172FilesAnalyzed: false
  2173PackageChecksum: SHA256: 771fadad552618ff0ae1e08892c4c5e06bab75c14304e2dccdfa390dc2db2a86
  2174PackageHomePage: https://gopkg.in/inf.v0
  2175PackageLicenseConcluded: NOASSERTION
  2176PackageLicenseDeclared: NOASSERTION
  2177PackageCopyrightText: NOASSERTION
  2178PackageLicenseComments: NOASSERTION
  2179PackageComment: NOASSERTION
  2180
  2181##### Package representing the k8s.io/apimachinery
  2182
  2183PackageName: k8s.io/apimachinery
  2184SPDXID: SPDXRef-Package-k8s.io.apimachinery-v0.21.2
  2185PackageVersion: v0.21.2
  2186PackageSupplier: NOASSERTION
  2187PackageDownloadLocation: NOASSERTION
  2188FilesAnalyzed: false
  2189PackageChecksum: SHA256: 99a73f202aa86722321431e4bd1cd3f88ed1d4e680cddbe4d1d16c1794a02c4e
  2190PackageHomePage: https://k8s.io/apimachinery
  2191PackageLicenseConcluded: NOASSERTION
  2192PackageLicenseDeclared: NOASSERTION
  2193PackageCopyrightText: NOASSERTION
  2194PackageLicenseComments: NOASSERTION
  2195PackageComment: NOASSERTION
  2196
  2197Relationship SPDXRef-Package-k8s.io.apimachinery-v0.21.2 DEPENDS_ON SPDXRef-Package-k8s.io.klog.v2-v2.8.0 
  2198Relationship SPDXRef-Package-k8s.io.apimachinery-v0.21.2 DEPENDS_ON SPDXRef-Package-sigs.k8s.io.structured-merge-diff.v4-v4.1.0 
  2199Relationship SPDXRef-Package-k8s.io.apimachinery-v0.21.2 DEPENDS_ON SPDXRef-Package-golang.org.x.sys-v0.0.0-20210615035016-665e8c7367d1 
  2200Relationship SPDXRef-Package-k8s.io.apimachinery-v0.21.2 DEPENDS_ON SPDXRef-Package-gopkg.in.inf.v0-v0.9.1 
  2201Relationship SPDXRef-Package-k8s.io.apimachinery-v0.21.2 DEPENDS_ON SPDXRef-Package-sigs.k8s.io.yaml-v1.2.0 
  2202Relationship SPDXRef-Package-k8s.io.apimachinery-v0.21.2 DEPENDS_ON SPDXRef-Package-github.com.pkg.errors-v0.9.1 
  2203Relationship SPDXRef-Package-k8s.io.apimachinery-v0.21.2 DEPENDS_ON SPDXRef-Package-github.com.json-iterator.go-v1.1.11 
  2204Relationship SPDXRef-Package-k8s.io.apimachinery-v0.21.2 DEPENDS_ON SPDXRef-Package-github.com.google.gofuzz-v1.2.0 
  2205Relationship SPDXRef-Package-k8s.io.apimachinery-v0.21.2 DEPENDS_ON SPDXRef-Package-github.com.gogo.protobuf-v1.3.2 
  2206Relationship SPDXRef-Package-k8s.io.apimachinery-v0.21.2 DEPENDS_ON SPDXRef-Package-github.com.davecgh.go-spew-v1.1.1 
  2207Relationship SPDXRef-Package-k8s.io.apimachinery-v0.21.2 DEPENDS_ON SPDXRef-Package-golang.org.x.text-v0.3.6 
  2208Relationship SPDXRef-Package-k8s.io.apimachinery-v0.21.2 DEPENDS_ON SPDXRef-Package-google.golang.org.protobuf-v1.26.0 
  2209Relationship SPDXRef-Package-k8s.io.apimachinery-v0.21.2 DEPENDS_ON SPDXRef-Package-gopkg.in.yaml.v2-v2.4.0 
  2210Relationship SPDXRef-Package-k8s.io.apimachinery-v0.21.2 DEPENDS_ON SPDXRef-Package-github.com.spf13.pflag-v1.0.5 
  2211Relationship SPDXRef-Package-k8s.io.apimachinery-v0.21.2 DEPENDS_ON SPDXRef-Package-github.com.modern-go.reflect2-v1.0.1 
  2212Relationship SPDXRef-Package-k8s.io.apimachinery-v0.21.2 DEPENDS_ON SPDXRef-Package-github.com.golang.protobuf-v1.5.2 
  2213Relationship SPDXRef-Package-k8s.io.apimachinery-v0.21.2 DEPENDS_ON SPDXRef-Package-github.com.golang.groupcache-v0.0.0-20210331224755-41bb18bfe9da 
  2214Relationship SPDXRef-Package-k8s.io.apimachinery-v0.21.2 DEPENDS_ON SPDXRef-Package-golang.org.x.net-v0.0.0-20210525063256-abc453219eb5 
  2215Relationship SPDXRef-Package-k8s.io.apimachinery-v0.21.2 DEPENDS_ON SPDXRef-Package-github.com.googleapis.gnostic-v0.4.1 
  2216Relationship SPDXRef-Package-k8s.io.apimachinery-v0.21.2 DEPENDS_ON SPDXRef-Package-github.com.google.go-cmp-v0.5.6 
  2217
  2218##### Package representing the github.com/google/gofuzz
  2219
  2220PackageName: github.com/google/gofuzz
  2221SPDXID: SPDXRef-Package-github.com.google.gofuzz-v1.2.0
  2222PackageVersion: v1.2.0
  2223PackageSupplier: NOASSERTION
  2224PackageDownloadLocation: NOASSERTION
  2225FilesAnalyzed: false
  2226PackageChecksum: SHA256: 9f90c7a974671a73dfacee0304a7b34959a807ae0dced51d0aa6f4883b296827
  2227PackageHomePage: https://github.com/google/gofuzz
  2228PackageLicenseConcluded: NOASSERTION
  2229PackageLicenseDeclared: NOASSERTION
  2230PackageCopyrightText: NOASSERTION
  2231PackageLicenseComments: NOASSERTION
  2232PackageComment: NOASSERTION
  2233
  2234##### Package representing the github.com/go-logr/logr
  2235
  2236PackageName: github.com/go-logr/logr
  2237SPDXID: SPDXRef-Package-github.com.go-logr.logr-v0.4.0
  2238PackageVersion: v0.4.0
  2239PackageSupplier: NOASSERTION
  2240PackageDownloadLocation: NOASSERTION
  2241FilesAnalyzed: false
  2242PackageChecksum: SHA256: 729410377448d47553cbc0b4dd2894ca3c1aa69e6426e18aa31f2bae3ab6a1c8
  2243PackageHomePage: https://github.com/go-logr/logr
  2244PackageLicenseConcluded: NOASSERTION
  2245PackageLicenseDeclared: NOASSERTION
  2246PackageCopyrightText: NOASSERTION
  2247PackageLicenseComments: NOASSERTION
  2248PackageComment: NOASSERTION
  2249
  2250##### Package representing the k8s.io/klog/v2
  2251
  2252PackageName: k8s.io/klog/v2
  2253SPDXID: SPDXRef-Package-k8s.io.klog.v2-v2.8.0
  2254PackageVersion: v2.8.0
  2255PackageSupplier: NOASSERTION
  2256PackageDownloadLocation: NOASSERTION
  2257FilesAnalyzed: false
  2258PackageChecksum: SHA256: f3843055d8b518fac6bd96d36d10cda14ef347848023df47e0ae510cfc668c9d
  2259PackageHomePage: https://k8s.io/klog/v2
  2260PackageLicenseConcluded: NOASSERTION
  2261PackageLicenseDeclared: NOASSERTION
  2262PackageCopyrightText: NOASSERTION
  2263PackageLicenseComments: NOASSERTION
  2264PackageComment: NOASSERTION
  2265
  2266Relationship SPDXRef-Package-k8s.io.klog.v2-v2.8.0 DEPENDS_ON SPDXRef-Package-github.com.go-logr.logr-v0.4.0 
  2267
  2268##### Package representing the github.com/modern-go/concurrent
  2269
  2270PackageName: github.com/modern-go/concurrent
  2271SPDXID: SPDXRef-Package-github.com.modern-go.concurrent-v0.0.0-20180306012644-bacd9c7ef1dd
  2272PackageVersion: v0.0.0-20180306012644-bacd9c7ef1dd
  2273PackageSupplier: NOASSERTION
  2274PackageDownloadLocation: NOASSERTION
  2275FilesAnalyzed: false
  2276PackageChecksum: SHA256: c6081e6ce83b52eb5415b1eaaa3920fcbdff17d1c3fa789b5b89d2cbbc6ace2e
  2277PackageHomePage: https://github.com/modern-go/concurrent
  2278PackageLicenseConcluded: NOASSERTION
  2279PackageLicenseDeclared: NOASSERTION
  2280PackageCopyrightText: NOASSERTION
  2281PackageLicenseComments: NOASSERTION
  2282PackageComment: NOASSERTION
  2283
  2284##### Package representing the github.com/modern-go/reflect2
  2285
  2286PackageName: github.com/modern-go/reflect2
  2287SPDXID: SPDXRef-Package-github.com.modern-go.reflect2-v1.0.1
  2288PackageVersion: v1.0.1
  2289PackageSupplier: NOASSERTION
  2290PackageDownloadLocation: NOASSERTION
  2291FilesAnalyzed: false
  2292PackageChecksum: SHA256: 95aa5db9774824ade90b1b53c29f23e331139bed8b757f2c715ea0efc7399fc8
  2293PackageHomePage: https://github.com/modern-go/reflect2
  2294PackageLicenseConcluded: NOASSERTION
  2295PackageLicenseDeclared: NOASSERTION
  2296PackageCopyrightText: NOASSERTION
  2297PackageLicenseComments: NOASSERTION
  2298PackageComment: NOASSERTION
  2299
  2300##### Package representing the github.com/json-iterator/go
  2301
  2302PackageName: github.com/json-iterator/go
  2303SPDXID: SPDXRef-Package-github.com.json-iterator.go-v1.1.11
  2304PackageVersion: v1.1.11
  2305PackageSupplier: NOASSERTION
  2306PackageDownloadLocation: NOASSERTION
  2307FilesAnalyzed: false
  2308PackageChecksum: SHA256: 254625d8d2b1f7077ee5b424343f8a20c77e36b8d825fae1edf817949c9b3e84
  2309PackageHomePage: https://github.com/json-iterator/go
  2310PackageLicenseConcluded: NOASSERTION
  2311PackageLicenseDeclared: NOASSERTION
  2312PackageCopyrightText: NOASSERTION
  2313PackageLicenseComments: NOASSERTION
  2314PackageComment: NOASSERTION
  2315
  2316Relationship SPDXRef-Package-github.com.json-iterator.go-v1.1.11 DEPENDS_ON SPDXRef-Package-github.com.davecgh.go-spew-v1.1.1 
  2317Relationship SPDXRef-Package-github.com.json-iterator.go-v1.1.11 DEPENDS_ON SPDXRef-Package-github.com.google.gofuzz-v1.2.0 
  2318Relationship SPDXRef-Package-github.com.json-iterator.go-v1.1.11 DEPENDS_ON SPDXRef-Package-github.com.modern-go.concurrent-v0.0.0-20180306012644-bacd9c7ef1dd 
  2319Relationship SPDXRef-Package-github.com.json-iterator.go-v1.1.11 DEPENDS_ON SPDXRef-Package-github.com.modern-go.reflect2-v1.0.1 
  2320
  2321##### Package representing the sigs.k8s.io/structured-merge-diff/v4
  2322
  2323PackageName: sigs.k8s.io/structured-merge-diff/v4
  2324SPDXID: SPDXRef-Package-sigs.k8s.io.structured-merge-diff.v4-v4.1.0
  2325PackageVersion: v4.1.0
  2326PackageSupplier: NOASSERTION
  2327PackageDownloadLocation: NOASSERTION
  2328FilesAnalyzed: false
  2329PackageChecksum: SHA256: 223818142048052ae7e0e13055d154f4e681983fa3fabd380ed59d459f9bbea7
  2330PackageHomePage: https://sigs.k8s.io/structured-merge-diff/v4
  2331PackageLicenseConcluded: NOASSERTION
  2332PackageLicenseDeclared: NOASSERTION
  2333PackageCopyrightText: NOASSERTION
  2334PackageLicenseComments: NOASSERTION
  2335PackageComment: NOASSERTION
  2336
  2337Relationship SPDXRef-Package-sigs.k8s.io.structured-merge-diff.v4-v4.1.0 DEPENDS_ON SPDXRef-Package-github.com.modern-go.concurrent-v0.0.0-20180306012644-bacd9c7ef1dd 
  2338Relationship SPDXRef-Package-sigs.k8s.io.structured-merge-diff.v4-v4.1.0 DEPENDS_ON SPDXRef-Package-github.com.modern-go.reflect2-v1.0.1 
  2339Relationship SPDXRef-Package-sigs.k8s.io.structured-merge-diff.v4-v4.1.0 DEPENDS_ON SPDXRef-Package-gopkg.in.yaml.v2-v2.4.0 
  2340Relationship SPDXRef-Package-sigs.k8s.io.structured-merge-diff.v4-v4.1.0 DEPENDS_ON SPDXRef-Package-github.com.google.gofuzz-v1.2.0 
  2341Relationship SPDXRef-Package-sigs.k8s.io.structured-merge-diff.v4-v4.1.0 DEPENDS_ON SPDXRef-Package-github.com.json-iterator.go-v1.1.11 
  2342
  2343##### Package representing the k8s.io/api
  2344
  2345PackageName: k8s.io/api
  2346SPDXID: SPDXRef-Package-k8s.io.api-v0.21.2
  2347PackageVersion: v0.21.2
  2348PackageSupplier: NOASSERTION
  2349PackageDownloadLocation: NOASSERTION
  2350FilesAnalyzed: false
  2351PackageChecksum: SHA256: 0f91c64066f5e8b2de142b2d3b155d66d6edcf720aa0f30af9929be542aa6ffe
  2352PackageHomePage: https://k8s.io/api
  2353PackageLicenseConcluded: NOASSERTION
  2354PackageLicenseDeclared: NOASSERTION
  2355PackageCopyrightText: NOASSERTION
  2356PackageLicenseComments: NOASSERTION
  2357PackageComment: NOASSERTION
  2358
  2359Relationship SPDXRef-Package-k8s.io.api-v0.21.2 DEPENDS_ON SPDXRef-Package-k8s.io.apimachinery-v0.21.2 
  2360Relationship SPDXRef-Package-k8s.io.api-v0.21.2 DEPENDS_ON SPDXRef-Package-github.com.gogo.protobuf-v1.3.2 
  2361
  2362##### Package representing the github.com/googleapis/gnostic
  2363
  2364PackageName: github.com/googleapis/gnostic
  2365SPDXID: SPDXRef-Package-github.com.googleapis.gnostic-v0.4.1
  2366PackageVersion: v0.4.1
  2367PackageSupplier: NOASSERTION
  2368PackageDownloadLocation: NOASSERTION
  2369FilesAnalyzed: false
  2370PackageChecksum: SHA256: 2e1455e8d4d3a3ca2c1429f4dfd223227c5d875a0b9fec12c7a8b6540e606a58
  2371PackageHomePage: https://github.com/googleapis/gnostic
  2372PackageLicenseConcluded: NOASSERTION
  2373PackageLicenseDeclared: NOASSERTION
  2374PackageCopyrightText: NOASSERTION
  2375PackageLicenseComments: NOASSERTION
  2376PackageComment: NOASSERTION
  2377
  2378Relationship SPDXRef-Package-github.com.googleapis.gnostic-v0.4.1 DEPENDS_ON SPDXRef-Package-github.com.golang.protobuf-v1.5.2 
  2379Relationship SPDXRef-Package-github.com.googleapis.gnostic-v0.4.1 DEPENDS_ON SPDXRef-Package-gopkg.in.yaml.v2-v2.4.0 
  2380
  2381##### Package representing the sigs.k8s.io/yaml
  2382
  2383PackageName: sigs.k8s.io/yaml
  2384SPDXID: SPDXRef-Package-sigs.k8s.io.yaml-v1.2.0
  2385PackageVersion: v1.2.0
  2386PackageSupplier: NOASSERTION
  2387PackageDownloadLocation: NOASSERTION
  2388FilesAnalyzed: false
  2389PackageChecksum: SHA256: 76d8cd575a926fc427aa57cf0574548aac399ee84e3e313e841c1cccf99ffac7
  2390PackageHomePage: https://sigs.k8s.io/yaml
  2391PackageLicenseConcluded: NOASSERTION
  2392PackageLicenseDeclared: NOASSERTION
  2393PackageCopyrightText: NOASSERTION
  2394PackageLicenseComments: NOASSERTION
  2395PackageComment: NOASSERTION
  2396
  2397Relationship SPDXRef-Package-sigs.k8s.io.yaml-v1.2.0 DEPENDS_ON SPDXRef-Package-gopkg.in.yaml.v2-v2.4.0 
  2398Relationship SPDXRef-Package-sigs.k8s.io.yaml-v1.2.0 DEPENDS_ON SPDXRef-Package-github.com.davecgh.go-spew-v1.1.1 
  2399
  2400##### Package representing the k8s.io/client-go
  2401
  2402PackageName: k8s.io/client-go
  2403SPDXID: SPDXRef-Package-k8s.io.client-go-v0.21.2
  2404PackageVersion: v0.21.2
  2405PackageSupplier: NOASSERTION
  2406PackageDownloadLocation: NOASSERTION
  2407FilesAnalyzed: false
  2408PackageChecksum: SHA256: 49c966ba6a48e4cb8e520ae8c8285d0d19fdf7706b4ba3f7e50acdcddaa560f3
  2409PackageHomePage: https://k8s.io/client-go
  2410PackageLicenseConcluded: NOASSERTION
  2411PackageLicenseDeclared: NOASSERTION
  2412PackageCopyrightText: NOASSERTION
  2413PackageLicenseComments: NOASSERTION
  2414PackageComment: NOASSERTION
  2415
  2416Relationship SPDXRef-Package-k8s.io.client-go-v0.21.2 DEPENDS_ON SPDXRef-Package-golang.org.x.oauth2-v0.0.0-20210514164344-f6687ab2804c 
  2417Relationship SPDXRef-Package-k8s.io.client-go-v0.21.2 DEPENDS_ON SPDXRef-Package-github.com.davecgh.go-spew-v1.1.1 
  2418Relationship SPDXRef-Package-k8s.io.client-go-v0.21.2 DEPENDS_ON SPDXRef-Package-github.com.googleapis.gnostic-v0.4.1 
  2419Relationship SPDXRef-Package-k8s.io.client-go-v0.21.2 DEPENDS_ON SPDXRef-Package-golang.org.x.time-v0.0.0-20210220033141-f8bda1e9f3ba 
  2420Relationship SPDXRef-Package-k8s.io.client-go-v0.21.2 DEPENDS_ON SPDXRef-Package-github.com.imdario.mergo-v0.3.9 
  2421Relationship SPDXRef-Package-k8s.io.client-go-v0.21.2 DEPENDS_ON SPDXRef-Package-github.com.Azure.go-autorest.autorest-v0.11.18 
  2422Relationship SPDXRef-Package-k8s.io.client-go-v0.21.2 DEPENDS_ON SPDXRef-Package-github.com.Azure.go-autorest.autorest.adal-v0.9.13 
  2423Relationship SPDXRef-Package-k8s.io.client-go-v0.21.2 DEPENDS_ON SPDXRef-Package-github.com.gogo.protobuf-v1.3.2 
  2424Relationship SPDXRef-Package-k8s.io.client-go-v0.21.2 DEPENDS_ON SPDXRef-Package-github.com.google.gofuzz-v1.2.0 
  2425Relationship SPDXRef-Package-k8s.io.client-go-v0.21.2 DEPENDS_ON SPDXRef-Package-github.com.spf13.pflag-v1.0.5 
  2426Relationship SPDXRef-Package-k8s.io.client-go-v0.21.2 DEPENDS_ON SPDXRef-Package-golang.org.x.term-v0.0.0-20210615171337-6886f2dfbf5b 
  2427Relationship SPDXRef-Package-k8s.io.client-go-v0.21.2 DEPENDS_ON SPDXRef-Package-k8s.io.apimachinery-v0.21.2 
  2428Relationship SPDXRef-Package-k8s.io.client-go-v0.21.2 DEPENDS_ON SPDXRef-Package-golang.org.x.crypto-v0.0.0-20210616213533-5ff15b29337e 
  2429Relationship SPDXRef-Package-k8s.io.client-go-v0.21.2 DEPENDS_ON SPDXRef-Package-cloud.google.com.go-v0.81.0 
  2430Relationship SPDXRef-Package-k8s.io.client-go-v0.21.2 DEPENDS_ON SPDXRef-Package-github.com.golang.groupcache-v0.0.0-20210331224755-41bb18bfe9da 
  2431Relationship SPDXRef-Package-k8s.io.client-go-v0.21.2 DEPENDS_ON SPDXRef-Package-github.com.google.go-cmp-v0.5.6 
  2432Relationship SPDXRef-Package-k8s.io.client-go-v0.21.2 DEPENDS_ON SPDXRef-Package-sigs.k8s.io.yaml-v1.2.0 
  2433Relationship SPDXRef-Package-k8s.io.client-go-v0.21.2 DEPENDS_ON SPDXRef-Package-k8s.io.utils-v0.0.0-20201110183641-67b214c5f920 
  2434Relationship SPDXRef-Package-k8s.io.client-go-v0.21.2 DEPENDS_ON SPDXRef-Package-k8s.io.klog.v2-v2.8.0 
  2435Relationship SPDXRef-Package-k8s.io.client-go-v0.21.2 DEPENDS_ON SPDXRef-Package-github.com.golang.protobuf-v1.5.2 
  2436Relationship SPDXRef-Package-k8s.io.client-go-v0.21.2 DEPENDS_ON SPDXRef-Package-sigs.k8s.io.structured-merge-diff.v4-v4.1.0 
  2437Relationship SPDXRef-Package-k8s.io.client-go-v0.21.2 DEPENDS_ON SPDXRef-Package-k8s.io.api-v0.21.2 
  2438Relationship SPDXRef-Package-k8s.io.client-go-v0.21.2 DEPENDS_ON SPDXRef-Package-golang.org.x.net-v0.0.0-20210525063256-abc453219eb5 
  2439
  2440##### Package representing the github.com/davecgh/go-spew
  2441
  2442PackageName: github.com/davecgh/go-spew
  2443SPDXID: SPDXRef-Package-github.com.davecgh.go-spew-v1.1.1
  2444PackageVersion: v1.1.1
  2445PackageSupplier: NOASSERTION
  2446PackageDownloadLocation: NOASSERTION
  2447FilesAnalyzed: false
  2448PackageChecksum: SHA256: 77d53af0a568b8c213c0a761194a7cb44abeb0c005359ec1b41ffdab10d7bb13
  2449PackageHomePage: https://github.com/davecgh/go-spew
  2450PackageLicenseConcluded: NOASSERTION
  2451PackageLicenseDeclared: NOASSERTION
  2452PackageCopyrightText: NOASSERTION
  2453PackageLicenseComments: NOASSERTION
  2454PackageComment: NOASSERTION
  2455
  2456##### Package representing the k8s.io/utils
  2457
  2458PackageName: k8s.io/utils
  2459SPDXID: SPDXRef-Package-k8s.io.utils-v0.0.0-20201110183641-67b214c5f920
  2460PackageVersion: v0.0.0-20201110183641-67b214c5f920
  2461PackageSupplier: NOASSERTION
  2462PackageDownloadLocation: NOASSERTION
  2463FilesAnalyzed: false
  2464PackageChecksum: SHA256: e27d3708c47807fa1e142d0d0043af60498463f429ea0932ffc50249e3efa6c6
  2465PackageHomePage: https://k8s.io/utils
  2466PackageLicenseConcluded: NOASSERTION
  2467PackageLicenseDeclared: NOASSERTION
  2468PackageCopyrightText: NOASSERTION
  2469PackageLicenseComments: NOASSERTION
  2470PackageComment: NOASSERTION
  2471
  2472Relationship SPDXRef-Package-k8s.io.utils-v0.0.0-20201110183641-67b214c5f920 DEPENDS_ON SPDXRef-Package-k8s.io.klog.v2-v2.8.0 
  2473Relationship SPDXRef-Package-k8s.io.utils-v0.0.0-20201110183641-67b214c5f920 DEPENDS_ON SPDXRef-Package-github.com.spf13.afero-v1.6.0 
  2474Relationship SPDXRef-Package-k8s.io.utils-v0.0.0-20201110183641-67b214c5f920 DEPENDS_ON SPDXRef-Package-github.com.davecgh.go-spew-v1.1.1 
  2475
  2476##### Package representing the github.com/Azure/go-autorest/autorest/date
  2477
  2478PackageName: github.com/Azure/go-autorest/autorest/date
  2479SPDXID: SPDXRef-Package-github.com.Azure.go-autorest.autorest.date-v0.3.0
  2480PackageVersion: v0.3.0
  2481PackageSupplier: NOASSERTION
  2482PackageDownloadLocation: NOASSERTION
  2483FilesAnalyzed: false
  2484PackageChecksum: SHA256: e6ac66ef043540fb1bd849b36ae1582dc360d9a274cbd9cc9768d1659f9e59fa
  2485PackageHomePage: https://github.com/Azure/go-autorest/autorest/date
  2486PackageLicenseConcluded: NOASSERTION
  2487PackageLicenseDeclared: NOASSERTION
  2488PackageCopyrightText: NOASSERTION
  2489PackageLicenseComments: NOASSERTION
  2490PackageComment: NOASSERTION
  2491
  2492##### Package representing the github.com/Azure/go-autorest/logger
  2493
  2494PackageName: github.com/Azure/go-autorest/logger
  2495SPDXID: SPDXRef-Package-github.com.Azure.go-autorest.logger-v0.2.1
  2496PackageVersion: v0.2.1
  2497PackageSupplier: NOASSERTION
  2498PackageDownloadLocation: NOASSERTION
  2499FilesAnalyzed: false
  2500PackageChecksum: SHA256: 6f980aaf27fee26a7f7017d638e0b9092a26c1c7af79b8263bf4a6e2a20452c6
  2501PackageHomePage: https://github.com/Azure/go-autorest/logger
  2502PackageLicenseConcluded: NOASSERTION
  2503PackageLicenseDeclared: NOASSERTION
  2504PackageCopyrightText: NOASSERTION
  2505PackageLicenseComments: NOASSERTION
  2506PackageComment: NOASSERTION
  2507
  2508##### Package representing the github.com/Azure/go-autorest/tracing
  2509
  2510PackageName: github.com/Azure/go-autorest/tracing
  2511SPDXID: SPDXRef-Package-github.com.Azure.go-autorest.tracing-v0.6.0
  2512PackageVersion: v0.6.0
  2513PackageSupplier: NOASSERTION
  2514PackageDownloadLocation: NOASSERTION
  2515FilesAnalyzed: false
  2516PackageChecksum: SHA256: e9b2a988aca23d841384a17068de9dcd59ccb7032cd6eadf05430edd426134c2
  2517PackageHomePage: https://github.com/Azure/go-autorest/tracing
  2518PackageLicenseConcluded: NOASSERTION
  2519PackageLicenseDeclared: NOASSERTION
  2520PackageCopyrightText: NOASSERTION
  2521PackageLicenseComments: NOASSERTION
  2522PackageComment: NOASSERTION
  2523
  2524##### Package representing the github.com/form3tech-oss/jwt-go
  2525
  2526PackageName: github.com/form3tech-oss/jwt-go
  2527SPDXID: SPDXRef-Package-github.com.form3tech-oss.jwt-go-v3.2.2+incompatible
  2528PackageVersion: v3.2.2+incompatible
  2529PackageSupplier: NOASSERTION
  2530PackageDownloadLocation: NOASSERTION
  2531FilesAnalyzed: false
  2532PackageChecksum: SHA256: 4a559f8950d5014570c484552049fa65e1c9eaa3ee5aac02920020103d345f9c
  2533PackageHomePage: https://github.com/form3tech-oss/jwt-go
  2534PackageLicenseConcluded: NOASSERTION
  2535PackageLicenseDeclared: NOASSERTION
  2536PackageCopyrightText: NOASSERTION
  2537PackageLicenseComments: NOASSERTION
  2538PackageComment: NOASSERTION
  2539
  2540##### Package representing the github.com/Azure/go-autorest/autorest/adal
  2541
  2542PackageName: github.com/Azure/go-autorest/autorest/adal
  2543SPDXID: SPDXRef-Package-github.com.Azure.go-autorest.autorest.adal-v0.9.13
  2544PackageVersion: v0.9.13
  2545PackageSupplier: NOASSERTION
  2546PackageDownloadLocation: NOASSERTION
  2547FilesAnalyzed: false
  2548PackageChecksum: SHA256: 1d8888e699a769d032389aa3de1f49bbdda2bf7c250baf1376146ec54228851b
  2549PackageHomePage: https://github.com/Azure/go-autorest/autorest/adal
  2550PackageLicenseConcluded: NOASSERTION
  2551PackageLicenseDeclared: NOASSERTION
  2552PackageCopyrightText: NOASSERTION
  2553PackageLicenseComments: NOASSERTION
  2554PackageComment: NOASSERTION
  2555
  2556Relationship SPDXRef-Package-github.com.Azure.go-autorest.autorest.adal-v0.9.13 DEPENDS_ON SPDXRef-Package-github.com.Azure.go-autorest.autorest.date-v0.3.0 
  2557Relationship SPDXRef-Package-github.com.Azure.go-autorest.autorest.adal-v0.9.13 DEPENDS_ON SPDXRef-Package-github.com.Azure.go-autorest.tracing-v0.6.0 
  2558Relationship SPDXRef-Package-github.com.Azure.go-autorest.autorest.adal-v0.9.13 DEPENDS_ON SPDXRef-Package-github.com.form3tech-oss.jwt-go-v3.2.2+incompatible 
  2559Relationship SPDXRef-Package-github.com.Azure.go-autorest.autorest.adal-v0.9.13 DEPENDS_ON SPDXRef-Package-golang.org.x.crypto-v0.0.0-20210616213533-5ff15b29337e 
  2560Relationship SPDXRef-Package-github.com.Azure.go-autorest.autorest.adal-v0.9.13 DEPENDS_ON SPDXRef-Package-github.com.Azure.go-autorest.logger-v0.2.1 
  2561
  2562##### Package representing the github.com/Azure/go-autorest/autorest
  2563
  2564PackageName: github.com/Azure/go-autorest/autorest
  2565SPDXID: SPDXRef-Package-github.com.Azure.go-autorest.autorest-v0.11.18
  2566PackageVersion: v0.11.18
  2567PackageSupplier: NOASSERTION
  2568PackageDownloadLocation: NOASSERTION
  2569FilesAnalyzed: false
  2570PackageChecksum: SHA256: 7b85debcce807a016fbdae358971274f74c396ab20b58a73e8fa69fcaed58912
  2571PackageHomePage: https://github.com/Azure/go-autorest/autorest
  2572PackageLicenseConcluded: NOASSERTION
  2573PackageLicenseDeclared: NOASSERTION
  2574PackageCopyrightText: NOASSERTION
  2575PackageLicenseComments: NOASSERTION
  2576PackageComment: NOASSERTION
  2577
  2578Relationship SPDXRef-Package-github.com.Azure.go-autorest.autorest-v0.11.18 DEPENDS_ON SPDXRef-Package-github.com.Azure.go-autorest.autorest.adal-v0.9.13 
  2579Relationship SPDXRef-Package-github.com.Azure.go-autorest.autorest-v0.11.18 DEPENDS_ON SPDXRef-Package-github.com.Azure.go-autorest.logger-v0.2.1 
  2580Relationship SPDXRef-Package-github.com.Azure.go-autorest.autorest-v0.11.18 DEPENDS_ON SPDXRef-Package-github.com.Azure.go-autorest.tracing-v0.6.0 
  2581Relationship SPDXRef-Package-github.com.Azure.go-autorest.autorest-v0.11.18 DEPENDS_ON SPDXRef-Package-golang.org.x.crypto-v0.0.0-20210616213533-5ff15b29337e 
  2582
  2583##### Package representing the github.com/imdario/mergo
  2584
  2585PackageName: github.com/imdario/mergo
  2586SPDXID: SPDXRef-Package-github.com.imdario.mergo-v0.3.9
  2587PackageVersion: v0.3.9
  2588PackageSupplier: NOASSERTION
  2589PackageDownloadLocation: NOASSERTION
  2590FilesAnalyzed: false
  2591PackageChecksum: SHA256: 0ee96fdd2abc1d04b65d2bc2fcc2de4ae71b231e9543893db38016cd6822ae5c
  2592PackageHomePage: https://github.com/imdario/mergo
  2593PackageLicenseConcluded: NOASSERTION
  2594PackageLicenseDeclared: NOASSERTION
  2595PackageCopyrightText: NOASSERTION
  2596PackageLicenseComments: NOASSERTION
  2597PackageComment: NOASSERTION
  2598
  2599##### Package representing the github.com/OneOfOne/xxhash
  2600
  2601PackageName: github.com/OneOfOne/xxhash
  2602SPDXID: SPDXRef-Package-github.com.OneOfOne.xxhash-v1.2.8
  2603PackageVersion: v1.2.8
  2604PackageSupplier: NOASSERTION
  2605PackageDownloadLocation: NOASSERTION
  2606FilesAnalyzed: false
  2607PackageChecksum: SHA256: 72ca3234e0a2f98565da9eef27df8a5a3f8652e74066cd454feba34fe160787e
  2608PackageHomePage: https://github.com/OneOfOne/xxhash
  2609PackageLicenseConcluded: NOASSERTION
  2610PackageLicenseDeclared: NOASSERTION
  2611PackageCopyrightText: NOASSERTION
  2612PackageLicenseComments: NOASSERTION
  2613PackageComment: NOASSERTION
  2614
  2615##### Package representing the github.com/open-policy-agent/opa
  2616
  2617PackageName: github.com/open-policy-agent/opa
  2618SPDXID: SPDXRef-Package-github.com.open-policy-agent.opa-v0.29.4
  2619PackageVersion: v0.29.4
  2620PackageSupplier: NOASSERTION
  2621PackageDownloadLocation: NOASSERTION
  2622FilesAnalyzed: false
  2623PackageChecksum: SHA256: d45f3fe23dd8e18a1bd1ef0aa85ab059ed17d7a27bfd3d060d0c625186729110
  2624PackageHomePage: https://github.com/open-policy-agent/opa
  2625PackageLicenseConcluded: NOASSERTION
  2626PackageLicenseDeclared: NOASSERTION
  2627PackageCopyrightText: NOASSERTION
  2628PackageLicenseComments: NOASSERTION
  2629PackageComment: NOASSERTION
  2630
  2631Relationship SPDXRef-Package-github.com.open-policy-agent.opa-v0.29.4 DEPENDS_ON SPDXRef-Package-golang.org.x.net-v0.0.0-20210525063256-abc453219eb5 
  2632Relationship SPDXRef-Package-github.com.open-policy-agent.opa-v0.29.4 DEPENDS_ON SPDXRef-Package-github.com.yashtewari.glob-intersection-v0.0.0-20180916065949-5c77d914dd0b 
  2633Relationship SPDXRef-Package-github.com.open-policy-agent.opa-v0.29.4 DEPENDS_ON SPDXRef-Package-github.com.xeipuuv.gojsonreference-v0.0.0-20180127040603-bd5ef7bd5415 
  2634Relationship SPDXRef-Package-github.com.open-policy-agent.opa-v0.29.4 DEPENDS_ON SPDXRef-Package-github.com.spf13.cobra-v1.1.3 
  2635Relationship SPDXRef-Package-github.com.open-policy-agent.opa-v0.29.4 DEPENDS_ON SPDXRef-Package-github.com.peterh.liner-v0.0.0-20170211195444-bf27d3ba8e1d 
  2636Relationship SPDXRef-Package-github.com.open-policy-agent.opa-v0.29.4 DEPENDS_ON SPDXRef-Package-github.com.gorilla.mux-v1.8.0 
  2637Relationship SPDXRef-Package-github.com.open-policy-agent.opa-v0.29.4 DEPENDS_ON SPDXRef-Package-golang.org.x.time-v0.0.0-20210220033141-f8bda1e9f3ba 
  2638Relationship SPDXRef-Package-github.com.open-policy-agent.opa-v0.29.4 DEPENDS_ON SPDXRef-Package-github.com.prometheus.common-v0.29.0 
  2639Relationship SPDXRef-Package-github.com.open-policy-agent.opa-v0.29.4 DEPENDS_ON SPDXRef-Package-github.com.olekukonko.tablewriter-v0.0.5 
  2640Relationship SPDXRef-Package-github.com.open-policy-agent.opa-v0.29.4 DEPENDS_ON SPDXRef-Package-github.com.fsnotify.fsnotify-v1.4.9 
  2641Relationship SPDXRef-Package-github.com.open-policy-agent.opa-v0.29.4 DEPENDS_ON SPDXRef-Package-github.com.xeipuuv.gojsonpointer-v0.0.0-20190905194746-02993c407bfb 
  2642Relationship SPDXRef-Package-github.com.open-policy-agent.opa-v0.29.4 DEPENDS_ON SPDXRef-Package-github.com.pkg.errors-v0.9.1 
  2643Relationship SPDXRef-Package-github.com.open-policy-agent.opa-v0.29.4 DEPENDS_ON SPDXRef-Package-github.com.golang.protobuf-v1.5.2 
  2644Relationship SPDXRef-Package-github.com.open-policy-agent.opa-v0.29.4 DEPENDS_ON SPDXRef-Package-github.com.gobwas.glob-v0.2.3 
  2645Relationship SPDXRef-Package-github.com.open-policy-agent.opa-v0.29.4 DEPENDS_ON SPDXRef-Package-github.com.prometheus.procfs-v0.6.0 
  2646Relationship SPDXRef-Package-github.com.open-policy-agent.opa-v0.29.4 DEPENDS_ON SPDXRef-Package-go.uber.org.automaxprocs-v1.4.0 
  2647Relationship SPDXRef-Package-github.com.open-policy-agent.opa-v0.29.4 DEPENDS_ON SPDXRef-Package-github.com.spf13.pflag-v1.0.5 
  2648Relationship SPDXRef-Package-github.com.open-policy-agent.opa-v0.29.4 DEPENDS_ON SPDXRef-Package-github.com.sirupsen.logrus-v1.8.1 
  2649Relationship SPDXRef-Package-github.com.open-policy-agent.opa-v0.29.4 DEPENDS_ON SPDXRef-Package-github.com.rcrowley.go-metrics-v0.0.0-20200313005456-10cdbea86bc0 
  2650Relationship SPDXRef-Package-github.com.open-policy-agent.opa-v0.29.4 DEPENDS_ON SPDXRef-Package-github.com.prometheus.client-golang-v1.11.0 
  2651Relationship SPDXRef-Package-github.com.open-policy-agent.opa-v0.29.4 DEPENDS_ON SPDXRef-Package-github.com.ghodss.yaml-v1.0.0 
  2652Relationship SPDXRef-Package-github.com.open-policy-agent.opa-v0.29.4 DEPENDS_ON SPDXRef-Package-github.com.OneOfOne.xxhash-v1.2.8 
  2653Relationship SPDXRef-Package-github.com.open-policy-agent.opa-v0.29.4 DEPENDS_ON SPDXRef-Package-gopkg.in.yaml.v2-v2.4.0 
  2654
  2655##### Package representing the github.com/xeipuuv/gojsonpointer
  2656
  2657PackageName: github.com/xeipuuv/gojsonpointer
  2658SPDXID: SPDXRef-Package-github.com.xeipuuv.gojsonpointer-v0.0.0-20190905194746-02993c407bfb
  2659PackageVersion: v0.0.0-20190905194746-02993c407bfb
  2660PackageSupplier: NOASSERTION
  2661PackageDownloadLocation: NOASSERTION
  2662FilesAnalyzed: false
  2663PackageChecksum: SHA256: 63a2e8a1e3a190e1bc3280e3940d846c646ef3e908736ae72db9076029fcc706
  2664PackageHomePage: https://github.com/xeipuuv/gojsonpointer
  2665PackageLicenseConcluded: NOASSERTION
  2666PackageLicenseDeclared: NOASSERTION
  2667PackageCopyrightText: NOASSERTION
  2668PackageLicenseComments: NOASSERTION
  2669PackageComment: NOASSERTION
  2670
  2671##### Package representing the github.com/xeipuuv/gojsonreference
  2672
  2673PackageName: github.com/xeipuuv/gojsonreference
  2674SPDXID: SPDXRef-Package-github.com.xeipuuv.gojsonreference-v0.0.0-20180127040603-bd5ef7bd5415
  2675PackageVersion: v0.0.0-20180127040603-bd5ef7bd5415
  2676PackageSupplier: NOASSERTION
  2677PackageDownloadLocation: NOASSERTION
  2678FilesAnalyzed: false
  2679PackageChecksum: SHA256: 0200ca87486b0155e8c199eec9323c321665bb4938eccbac72d8547ed2082d6b
  2680PackageHomePage: https://github.com/xeipuuv/gojsonreference
  2681PackageLicenseConcluded: NOASSERTION
  2682PackageLicenseDeclared: NOASSERTION
  2683PackageCopyrightText: NOASSERTION
  2684PackageLicenseComments: NOASSERTION
  2685PackageComment: NOASSERTION
  2686
  2687##### Package representing the github.com/rcrowley/go-metrics
  2688
  2689PackageName: github.com/rcrowley/go-metrics
  2690SPDXID: SPDXRef-Package-github.com.rcrowley.go-metrics-v0.0.0-20200313005456-10cdbea86bc0
  2691PackageVersion: v0.0.0-20200313005456-10cdbea86bc0
  2692PackageSupplier: NOASSERTION
  2693PackageDownloadLocation: NOASSERTION
  2694FilesAnalyzed: false
  2695PackageChecksum: SHA256: bd748d8975427958e55da8adae7bcbe43186d696e49a4804df848d113506ca45
  2696PackageHomePage: https://github.com/rcrowley/go-metrics
  2697PackageLicenseConcluded: NOASSERTION
  2698PackageLicenseDeclared: NOASSERTION
  2699PackageCopyrightText: NOASSERTION
  2700PackageLicenseComments: NOASSERTION
  2701PackageComment: NOASSERTION
  2702
  2703##### Package representing the github.com/mattn/go-runewidth
  2704
  2705PackageName: github.com/mattn/go-runewidth
  2706SPDXID: SPDXRef-Package-github.com.mattn.go-runewidth-v0.0.9
  2707PackageVersion: v0.0.9
  2708PackageSupplier: NOASSERTION
  2709PackageDownloadLocation: NOASSERTION
  2710FilesAnalyzed: false
  2711PackageChecksum: SHA256: c0e249b2e49600457b866fa58f7075c833cd697601317bc0d8814817a4546987
  2712PackageHomePage: https://github.com/mattn/go-runewidth
  2713PackageLicenseConcluded: NOASSERTION
  2714PackageLicenseDeclared: NOASSERTION
  2715PackageCopyrightText: NOASSERTION
  2716PackageLicenseComments: NOASSERTION
  2717PackageComment: NOASSERTION
  2718
  2719##### Package representing the github.com/olekukonko/tablewriter
  2720
  2721PackageName: github.com/olekukonko/tablewriter
  2722SPDXID: SPDXRef-Package-github.com.olekukonko.tablewriter-v0.0.5
  2723PackageVersion: v0.0.5
  2724PackageSupplier: NOASSERTION
  2725PackageDownloadLocation: NOASSERTION
  2726FilesAnalyzed: false
  2727PackageChecksum: SHA256: 9e2c85817b12fce5ea554bb854c62ce8c10ae5124532ea9c3abee1c8d76f4105
  2728PackageHomePage: https://github.com/olekukonko/tablewriter
  2729PackageLicenseConcluded: NOASSERTION
  2730PackageLicenseDeclared: NOASSERTION
  2731PackageCopyrightText: NOASSERTION
  2732PackageLicenseComments: NOASSERTION
  2733PackageComment: NOASSERTION
  2734
  2735Relationship SPDXRef-Package-github.com.olekukonko.tablewriter-v0.0.5 DEPENDS_ON SPDXRef-Package-github.com.mattn.go-runewidth-v0.0.9 
  2736Relationship SPDXRef-Package-github.com.olekukonko.tablewriter-v0.0.5 DEPENDS_ON SPDXRef-Package-github.com.olekukonko.tablewriter-v0.0.5 
  2737
  2738##### Package representing the github.com/gobwas/glob
  2739
  2740PackageName: github.com/gobwas/glob
  2741SPDXID: SPDXRef-Package-github.com.gobwas.glob-v0.2.3
  2742PackageVersion: v0.2.3
  2743PackageSupplier: NOASSERTION
  2744PackageDownloadLocation: NOASSERTION
  2745FilesAnalyzed: false
  2746PackageChecksum: SHA256: 15b4a39767c64f15c6f6bc35d96f85768413a25bdfa4e46fa49a6374c9b7968b
  2747PackageHomePage: https://github.com/gobwas/glob
  2748PackageLicenseConcluded: NOASSERTION
  2749PackageLicenseDeclared: NOASSERTION
  2750PackageCopyrightText: NOASSERTION
  2751PackageLicenseComments: NOASSERTION
  2752PackageComment: NOASSERTION
  2753
  2754##### Package representing the github.com/yashtewari/glob-intersection
  2755
  2756PackageName: github.com/yashtewari/glob-intersection
  2757SPDXID: SPDXRef-Package-github.com.yashtewari.glob-intersection-v0.0.0-20180916065949-5c77d914dd0b
  2758PackageVersion: v0.0.0-20180916065949-5c77d914dd0b
  2759PackageSupplier: NOASSERTION
  2760PackageDownloadLocation: NOASSERTION
  2761FilesAnalyzed: false
  2762PackageChecksum: SHA256: 4ff4c9ffae6f6732584eb088757d9fcb30d0dc960c5b4e00c0cd4e05bacc04e4
  2763PackageHomePage: https://github.com/yashtewari/glob-intersection
  2764PackageLicenseConcluded: NOASSERTION
  2765PackageLicenseDeclared: NOASSERTION
  2766PackageCopyrightText: NOASSERTION
  2767PackageLicenseComments: NOASSERTION
  2768PackageComment: NOASSERTION
  2769
  2770##### Package representing the github.com/sirupsen/logrus
  2771
  2772PackageName: github.com/sirupsen/logrus
  2773SPDXID: SPDXRef-Package-github.com.sirupsen.logrus-v1.8.1
  2774PackageVersion: v1.8.1
  2775PackageSupplier: NOASSERTION
  2776PackageDownloadLocation: NOASSERTION
  2777FilesAnalyzed: false
  2778PackageChecksum: SHA256: adea913fb1c1be8bf12e8b69d1da7f226c014c55caf8e56335bbe4e114e41b50
  2779PackageHomePage: https://github.com/sirupsen/logrus
  2780PackageLicenseConcluded: NOASSERTION
  2781PackageLicenseDeclared: NOASSERTION
  2782PackageCopyrightText: NOASSERTION
  2783PackageLicenseComments: NOASSERTION
  2784PackageComment: NOASSERTION
  2785
  2786Relationship SPDXRef-Package-github.com.sirupsen.logrus-v1.8.1 DEPENDS_ON SPDXRef-Package-github.com.davecgh.go-spew-v1.1.1 
  2787Relationship SPDXRef-Package-github.com.sirupsen.logrus-v1.8.1 DEPENDS_ON SPDXRef-Package-golang.org.x.sys-v0.0.0-20210615035016-665e8c7367d1 
  2788Relationship SPDXRef-Package-github.com.sirupsen.logrus-v1.8.1 DEPENDS_ON SPDXRef-Package-golang.org.x.crypto-v0.0.0-20210616213533-5ff15b29337e 
  2789
  2790##### Package representing the github.com/gorilla/mux
  2791
  2792PackageName: github.com/gorilla/mux
  2793SPDXID: SPDXRef-Package-github.com.gorilla.mux-v1.8.0
  2794PackageVersion: v1.8.0
  2795PackageSupplier: NOASSERTION
  2796PackageDownloadLocation: NOASSERTION
  2797FilesAnalyzed: false
  2798PackageChecksum: SHA256: 2dffd95dd340d7e6948873a146da12fd4146c08eb6eb8c420f76e8d9a742814c
  2799PackageHomePage: https://github.com/gorilla/mux
  2800PackageLicenseConcluded: NOASSERTION
  2801PackageLicenseDeclared: NOASSERTION
  2802PackageCopyrightText: NOASSERTION
  2803PackageLicenseComments: NOASSERTION
  2804PackageComment: NOASSERTION
  2805
  2806##### Package representing the github.com/beorn7/perks
  2807
  2808PackageName: github.com/beorn7/perks
  2809SPDXID: SPDXRef-Package-github.com.beorn7.perks-v1.0.1
  2810PackageVersion: v1.0.1
  2811PackageSupplier: NOASSERTION
  2812PackageDownloadLocation: NOASSERTION
  2813FilesAnalyzed: false
  2814PackageChecksum: SHA256: 3f909457dc97a398f2d35bf26e5a7ba7af74a4b47f83b79dea360415ed24a98e
  2815PackageHomePage: https://github.com/beorn7/perks
  2816PackageLicenseConcluded: NOASSERTION
  2817PackageLicenseDeclared: NOASSERTION
  2818PackageCopyrightText: NOASSERTION
  2819PackageLicenseComments: NOASSERTION
  2820PackageComment: NOASSERTION
  2821
  2822##### Package representing the github.com/cespare/xxhash/v2
  2823
  2824PackageName: github.com/cespare/xxhash/v2
  2825SPDXID: SPDXRef-Package-github.com.cespare.xxhash.v2-v2.1.1
  2826PackageVersion: v2.1.1
  2827PackageSupplier: NOASSERTION
  2828PackageDownloadLocation: NOASSERTION
  2829FilesAnalyzed: false
  2830PackageChecksum: SHA256: 7d5ac3d632362d4e19965eb9745b4092e9e62bd9bccde15d4975cc5a97649c63
  2831PackageHomePage: https://github.com/cespare/xxhash/v2
  2832PackageLicenseConcluded: NOASSERTION
  2833PackageLicenseDeclared: NOASSERTION
  2834PackageCopyrightText: NOASSERTION
  2835PackageLicenseComments: NOASSERTION
  2836PackageComment: NOASSERTION
  2837
  2838##### Package representing the github.com/prometheus/client_model
  2839
  2840PackageName: github.com/prometheus/client_model
  2841SPDXID: SPDXRef-Package-github.com.prometheus.client-model-v0.2.0
  2842PackageVersion: v0.2.0
  2843PackageSupplier: NOASSERTION
  2844PackageDownloadLocation: NOASSERTION
  2845FilesAnalyzed: false
  2846PackageChecksum: SHA256: 4cc56642e11499313e9e0c16d30a8ba751e2f9c591dc6a1e7d675cf0e09e03d0
  2847PackageHomePage: https://github.com/prometheus/client_model
  2848PackageLicenseConcluded: NOASSERTION
  2849PackageLicenseDeclared: NOASSERTION
  2850PackageCopyrightText: NOASSERTION
  2851PackageLicenseComments: NOASSERTION
  2852PackageComment: NOASSERTION
  2853
  2854Relationship SPDXRef-Package-github.com.prometheus.client-model-v0.2.0 DEPENDS_ON SPDXRef-Package-golang.org.x.sync-v0.0.0-20210220032951-036812b2e83c 
  2855Relationship SPDXRef-Package-github.com.prometheus.client-model-v0.2.0 DEPENDS_ON SPDXRef-Package-github.com.golang.protobuf-v1.5.2 
  2856
  2857##### Package representing the github.com/prometheus/client_golang
  2858
  2859PackageName: github.com/prometheus/client_golang
  2860SPDXID: SPDXRef-Package-github.com.prometheus.client-golang-v1.11.0
  2861PackageVersion: v1.11.0
  2862PackageSupplier: NOASSERTION
  2863PackageDownloadLocation: NOASSERTION
  2864FilesAnalyzed: false
  2865PackageChecksum: SHA256: ed14dd907bac61d8ae65bcb0211771c661e1cf1f7fd2b1394b9b124893705177
  2866PackageHomePage: https://github.com/prometheus/client_golang
  2867PackageLicenseConcluded: NOASSERTION
  2868PackageLicenseDeclared: NOASSERTION
  2869PackageCopyrightText: NOASSERTION
  2870PackageLicenseComments: NOASSERTION
  2871PackageComment: NOASSERTION
  2872
  2873Relationship SPDXRef-Package-github.com.prometheus.client-golang-v1.11.0 DEPENDS_ON SPDXRef-Package-github.com.beorn7.perks-v1.0.1 
  2874Relationship SPDXRef-Package-github.com.prometheus.client-golang-v1.11.0 DEPENDS_ON SPDXRef-Package-gopkg.in.yaml.v2-v2.4.0 
  2875Relationship SPDXRef-Package-github.com.prometheus.client-golang-v1.11.0 DEPENDS_ON SPDXRef-Package-github.com.modern-go.reflect2-v1.0.1 
  2876Relationship SPDXRef-Package-github.com.prometheus.client-golang-v1.11.0 DEPENDS_ON SPDXRef-Package-github.com.matttproud.golang-protobuf-extensions-v1.0.1 
  2877Relationship SPDXRef-Package-github.com.prometheus.client-golang-v1.11.0 DEPENDS_ON SPDXRef-Package-github.com.json-iterator.go-v1.1.11 
  2878Relationship SPDXRef-Package-github.com.prometheus.client-golang-v1.11.0 DEPENDS_ON SPDXRef-Package-github.com.prometheus.common-v0.29.0 
  2879Relationship SPDXRef-Package-github.com.prometheus.client-golang-v1.11.0 DEPENDS_ON SPDXRef-Package-github.com.google.go-cmp-v0.5.6 
  2880Relationship SPDXRef-Package-github.com.prometheus.client-golang-v1.11.0 DEPENDS_ON SPDXRef-Package-github.com.modern-go.concurrent-v0.0.0-20180306012644-bacd9c7ef1dd 
  2881Relationship SPDXRef-Package-github.com.prometheus.client-golang-v1.11.0 DEPENDS_ON SPDXRef-Package-golang.org.x.net-v0.0.0-20210525063256-abc453219eb5 
  2882Relationship SPDXRef-Package-github.com.prometheus.client-golang-v1.11.0 DEPENDS_ON SPDXRef-Package-github.com.prometheus.client-model-v0.2.0 
  2883Relationship SPDXRef-Package-github.com.prometheus.client-golang-v1.11.0 DEPENDS_ON SPDXRef-Package-github.com.prometheus.procfs-v0.6.0 
  2884Relationship SPDXRef-Package-github.com.prometheus.client-golang-v1.11.0 DEPENDS_ON SPDXRef-Package-golang.org.x.text-v0.3.6 
  2885Relationship SPDXRef-Package-github.com.prometheus.client-golang-v1.11.0 DEPENDS_ON SPDXRef-Package-google.golang.org.protobuf-v1.26.0 
  2886Relationship SPDXRef-Package-github.com.prometheus.client-golang-v1.11.0 DEPENDS_ON SPDXRef-Package-golang.org.x.sync-v0.0.0-20210220032951-036812b2e83c 
  2887Relationship SPDXRef-Package-github.com.prometheus.client-golang-v1.11.0 DEPENDS_ON SPDXRef-Package-github.com.cespare.xxhash.v2-v2.1.1 
  2888Relationship SPDXRef-Package-github.com.prometheus.client-golang-v1.11.0 DEPENDS_ON SPDXRef-Package-github.com.golang.protobuf-v1.5.2 
  2889Relationship SPDXRef-Package-github.com.prometheus.client-golang-v1.11.0 DEPENDS_ON SPDXRef-Package-golang.org.x.sys-v0.0.0-20210615035016-665e8c7367d1 
  2890
  2891##### Package representing the github.com/matttproud/golang_protobuf_extensions
  2892
  2893PackageName: github.com/matttproud/golang_protobuf_extensions
  2894SPDXID: SPDXRef-Package-github.com.matttproud.golang-protobuf-extensions-v1.0.1
  2895PackageVersion: v1.0.1
  2896PackageSupplier: NOASSERTION
  2897PackageDownloadLocation: NOASSERTION
  2898FilesAnalyzed: false
  2899PackageChecksum: SHA256: d8a0ce3a4b0ec610a7ee215ad6b63ee7f83fa14f7ecea46ad86dad3f8f3b99e7
  2900PackageHomePage: https://github.com/matttproud/golang_protobuf_extensions
  2901PackageLicenseConcluded: NOASSERTION
  2902PackageLicenseDeclared: NOASSERTION
  2903PackageCopyrightText: NOASSERTION
  2904PackageLicenseComments: NOASSERTION
  2905PackageComment: NOASSERTION
  2906
  2907##### Package representing the github.com/prometheus/common
  2908
  2909PackageName: github.com/prometheus/common
  2910SPDXID: SPDXRef-Package-github.com.prometheus.common-v0.29.0
  2911PackageVersion: v0.29.0
  2912PackageSupplier: NOASSERTION
  2913PackageDownloadLocation: NOASSERTION
  2914FilesAnalyzed: false
  2915PackageChecksum: SHA256: dab655f661cec4b716fb97640b5c38306ce26552865eeacab4a3bc73d43966e7
  2916PackageHomePage: https://github.com/prometheus/common
  2917PackageLicenseConcluded: NOASSERTION
  2918PackageLicenseDeclared: NOASSERTION
  2919PackageCopyrightText: NOASSERTION
  2920PackageLicenseComments: NOASSERTION
  2921PackageComment: NOASSERTION
  2922
  2923Relationship SPDXRef-Package-github.com.prometheus.common-v0.29.0 DEPENDS_ON SPDXRef-Package-github.com.gogo.protobuf-v1.3.2 
  2924Relationship SPDXRef-Package-github.com.prometheus.common-v0.29.0 DEPENDS_ON SPDXRef-Package-github.com.prometheus.procfs-v0.6.0 
  2925Relationship SPDXRef-Package-github.com.prometheus.common-v0.29.0 DEPENDS_ON SPDXRef-Package-github.com.matttproud.golang-protobuf-extensions-v1.0.1 
  2926Relationship SPDXRef-Package-github.com.prometheus.common-v0.29.0 DEPENDS_ON SPDXRef-Package-github.com.prometheus.client-golang-v1.11.0 
  2927Relationship SPDXRef-Package-github.com.prometheus.common-v0.29.0 DEPENDS_ON SPDXRef-Package-github.com.prometheus.client-model-v0.2.0 
  2928Relationship SPDXRef-Package-github.com.prometheus.common-v0.29.0 DEPENDS_ON SPDXRef-Package-golang.org.x.net-v0.0.0-20210525063256-abc453219eb5 
  2929Relationship SPDXRef-Package-github.com.prometheus.common-v0.29.0 DEPENDS_ON SPDXRef-Package-github.com.beorn7.perks-v1.0.1 
  2930Relationship SPDXRef-Package-github.com.prometheus.common-v0.29.0 DEPENDS_ON SPDXRef-Package-github.com.go-stack.stack-v1.8.0 
  2931Relationship SPDXRef-Package-github.com.prometheus.common-v0.29.0 DEPENDS_ON SPDXRef-Package-github.com.golang.protobuf-v1.5.2 
  2932Relationship SPDXRef-Package-github.com.prometheus.common-v0.29.0 DEPENDS_ON SPDXRef-Package-github.com.sirupsen.logrus-v1.8.1 
  2933Relationship SPDXRef-Package-github.com.prometheus.common-v0.29.0 DEPENDS_ON SPDXRef-Package-golang.org.x.sys-v0.0.0-20210615035016-665e8c7367d1 
  2934Relationship SPDXRef-Package-github.com.prometheus.common-v0.29.0 DEPENDS_ON SPDXRef-Package-gopkg.in.yaml.v2-v2.4.0 
  2935Relationship SPDXRef-Package-github.com.prometheus.common-v0.29.0 DEPENDS_ON SPDXRef-Package-golang.org.x.oauth2-v0.0.0-20210514164344-f6687ab2804c 
  2936Relationship SPDXRef-Package-github.com.prometheus.common-v0.29.0 DEPENDS_ON SPDXRef-Package-github.com.pkg.errors-v0.9.1 
  2937Relationship SPDXRef-Package-github.com.prometheus.common-v0.29.0 DEPENDS_ON SPDXRef-Package-golang.org.x.sync-v0.0.0-20210220032951-036812b2e83c 
  2938
  2939##### Package representing the github.com/prometheus/procfs
  2940
  2941PackageName: github.com/prometheus/procfs
  2942SPDXID: SPDXRef-Package-github.com.prometheus.procfs-v0.6.0
  2943PackageVersion: v0.6.0
  2944PackageSupplier: NOASSERTION
  2945PackageDownloadLocation: NOASSERTION
  2946FilesAnalyzed: false
  2947PackageChecksum: SHA256: 86bd64823e49f5c1bedae11007fb801c88d3b28ac5e712d4002355a3101a2ddd
  2948PackageHomePage: https://github.com/prometheus/procfs
  2949PackageLicenseConcluded: NOASSERTION
  2950PackageLicenseDeclared: NOASSERTION
  2951PackageCopyrightText: NOASSERTION
  2952PackageLicenseComments: NOASSERTION
  2953PackageComment: NOASSERTION
  2954
  2955Relationship SPDXRef-Package-github.com.prometheus.procfs-v0.6.0 DEPENDS_ON SPDXRef-Package-github.com.google.go-cmp-v0.5.6 
  2956Relationship SPDXRef-Package-github.com.prometheus.procfs-v0.6.0 DEPENDS_ON SPDXRef-Package-golang.org.x.sync-v0.0.0-20210220032951-036812b2e83c 
  2957Relationship SPDXRef-Package-github.com.prometheus.procfs-v0.6.0 DEPENDS_ON SPDXRef-Package-golang.org.x.sys-v0.0.0-20210615035016-665e8c7367d1 
  2958
  2959##### Package representing the github.com/peterh/liner
  2960
  2961PackageName: github.com/peterh/liner
  2962SPDXID: SPDXRef-Package-github.com.peterh.liner-v0.0.0-20170211195444-bf27d3ba8e1d
  2963PackageVersion: v0.0.0-20170211195444-bf27d3ba8e1d
  2964PackageSupplier: NOASSERTION
  2965PackageDownloadLocation: NOASSERTION
  2966FilesAnalyzed: false
  2967PackageChecksum: SHA256: 246b8db15eff422e821053ea3d13e8d076779b5c62fcdbefdd1f18b71235b67f
  2968PackageHomePage: https://github.com/peterh/liner
  2969PackageLicenseConcluded: NOASSERTION
  2970PackageLicenseDeclared: NOASSERTION
  2971PackageCopyrightText: NOASSERTION
  2972PackageLicenseComments: NOASSERTION
  2973PackageComment: NOASSERTION
  2974
  2975##### Package representing the go.uber.org/automaxprocs
  2976
  2977PackageName: go.uber.org/automaxprocs
  2978SPDXID: SPDXRef-Package-go.uber.org.automaxprocs-v1.4.0
  2979PackageVersion: v1.4.0
  2980PackageSupplier: NOASSERTION
  2981PackageDownloadLocation: NOASSERTION
  2982FilesAnalyzed: false
  2983PackageChecksum: SHA256: 32be51bf668d3280000ab7aa1f970025fb49ef841201405a37d4cc98aaf7c71f
  2984PackageHomePage: https://go.uber.org/automaxprocs
  2985PackageLicenseConcluded: NOASSERTION
  2986PackageLicenseDeclared: NOASSERTION
  2987PackageCopyrightText: NOASSERTION
  2988PackageLicenseComments: NOASSERTION
  2989PackageComment: NOASSERTION
  2990

View as plain text